Kitabisa Teler 跨站脚本漏洞

Kitabisa Teler is a software from the Kitabisa team for implementing intrusion detection and threat alerts based on web logs. A cross-site scripting vulnerability exists in versions prior to Kitabisa Teler 2.0.0-rc.4, which stems from the fact that log data displayed on the dashboard is not clean...

CVE-2022-43556

Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XSS in the text input field since the result dashboard page output is not sanitized. The Concrete CMS security team has ranked this 4.2 with CVSS v3.1 vector AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N Thanks...

PortlandLabs Concrete CMS 跨站脚本漏洞

PortlandLabs Concrete CMS is an open source content management system for teams from PortlandLabs, Inc. in the United States. A security vulnerability exists in PortlandLabs Concrete CMS versions prior to 8.5.10, 9.0.0, and 9.1.2, which stems from uncleaned output on the results dashboard page...

Cisco Firepower Management Center Software XSS Vulnerabilities (cisco-sa-fmc-xss-LATZYzxs)

The version of Cisco Firepower Management Center installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to...

kubernetes security update

kubernetes 1.22.16-1 - Added Oracle specific build files for Kubernetes - Add preBuildOL8Commands to Jenkinsfile kubernetes 1.23.14-1 - Added Oracle specific build files for Kubernetes kubernetes 1.24.8-1 - Added Oracle specific build files for Kubernetes olcne 1.5.8-4 - Fix 1.21 kubernetes versi...

CVE-2022-4133

A reflected Cross-site scripting XSS vulnerability was found in the Red Hat OpenStack Platform dashboard. This issue could allow an attacker to trick a user into pasting malicious code in the “Allocation Pools” instance...

CVE-2022-38813

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...

CVE-2022-38377

An improper access control vulnerability CWE-284 in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11 and FortiAnalyzer 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.0 through 6.0.12 may allow a remote and...

CVE-2022-38813

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...

Record Management System Access Control Error Vulnerability

Teachers Record Management System is an open source Teachers Record Management System. Record Management System v1.0 suffers from an Access Control Error vulnerability that originates from improper access control in /Admin/dashboard.php. An attacker can exploit this vulnerability to access and...

PHPGurukul Blood Donor Management System 安全漏洞

PHPGurukul Blood Donor Management System is a blood donor management system from the US company PHPGurukul. A security vulnerability exists in version 1.0 of the PHPGurukul Blood Donor Management System that stems from not properly restricting access to admin/dashboard.php, which can be exploited...

Jenkins Dashboard View Plugin Cross-Site Scripting (CVE-2021-21649)

A stored cross-site scripting vulnerability exists in Jenkins Dashboard View Plugin. This vulnerability is due to insufficient validation of user-controlled information...

Teachers Record Management System 安全漏洞

Teachers Record Management System is an open source Teachers Record Management System. Record Management System v1.0 suffers from an Access Control Error vulnerability that originates from improper access control in /Admin/dashboard.php. An attacker can exploit this vulnerability to access and...

PT-2022-25876 · Unknown · Record Management System +1

Name of the Vulnerable Software and Affected Versions: Record Management System using CodeIgniter version 1.0 Description: The issue allows attackers to access and modify user data due to an access control problem in the /Admin/dashboard.php endpoint. Recommendations: For Record Management System...

CVE-2022-45069

Auth. contributor+ Privilege Escalation vulnerability in Crowdsignal Dashboard plugin = 3.0.9 on WordPress...

CVE-2022-45069

Auth. contributor+ Privilege Escalation vulnerability in Crowdsignal Dashboard plugin = 3.0.9 on WordPress...

Privilege escalation

Auth. contributor+ Privilege Escalation vulnerability in Crowdsignal Dashboard plugin = 3.0.9 on WordPress...

CVE-2022-45069 WordPress Crowdsignal Dashboard plugin <= 3.0.9 - Privilege Escalation vulnerability

Auth. contributor+ Privilege Escalation vulnerability in Crowdsignal Dashboard plugin = 3.0.9 on WordPress...

CVE-2022-45069

CVE-2022-45069 affects the WordPress Crowdsignal Dashboard plugin, versions

WordPress plugin Crowdsignal Dashboard 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...