21498 matches found
Cross site scripting
Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vectors...
CVE-2021-20734
Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vectors...
CVE-2021-20734
CVE-2021-20734 concerns the WordPress plugin Welcart e-Commerce . Connected sources confirm a cross-site scripting (XSS) vulnerability in versions prior to 2.2.4 , allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The issue affects the plugin in the WordPress ecos...
CVE-2021-20734
Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vectors...
Netapp E-Series SANtricity OS Controller Software Remote Code Execution Vulnerability
Netapp E-Series SANtricity OS Controller Software is a disk array OS control software from NetApp, Inc. A security vulnerability exists that could be exploited by a privileged attacker to execute arbitrary code...
Unauthorized Access Vulnerability in AXIS P1214-E Network Camera
Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P1214-E Network Camera, which can be exploited by attackers to obtain sensitive information...
Unauthorized Access Vulnerability in AXIS Q6044-E Network Camera
Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS Q6044-E Network Camera, which can be exploited by attackers to obtain sensitive information...
Unauthorized Access Vulnerability in AXIS P5522-E Network Camera
Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P5522-E Network Camera, which can be exploited by attackers to obtain sensitive information...
Unauthorized Access Vulnerability in AXIS P5512-E Network Camera
Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P5512-E Network Camera, which can be exploited by attackers to obtain sensitive information...
Unauthorized Access Vulnerability in AXIS P1224-E Network Camera
Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P1224-E Network Camera, which can be exploited by attackers to obtain sensitive information...
Ec-Cube cross-site scripting vulnerability (CNVD-2021-46279)
Ec-cube is an open source e-commerce system of the Japanese company Ec-cube . A cross-site scripting vulnerability exists in Ec-Cube, which can be exploited by a remote attacker to inject specially crafted scripts into specific input fields of an EC website created using EC-Cube and execute...
Unspecified Vulnerability in NetApp E-Series SANtricity OS Controller Software
Netapp E-Series SANtricity OS Controller Software is a disk array OS control software from American NetApp Netapp. A security vulnerability exists in E-Series SANtricity OS Controller Software versions 11.x through 11.70.1, which can be exploited by attackers to obtain sensitive information...
NetApp E-Series SANtricity OS Controller Software Has Denial of Service Vulnerability
Netapp E-Series SANtricity OS Controller Software is a disk array OS control software from American NetApp Netapp. A security vulnerability exists in E-Series SANtricity OS Controller Software versions 11.x through 11.70.1, which can be exploited by remote attackers to cause a partial denial of...
CVE-2021-34683
An issue was discovered in EXCELLENT INFOTEK CORPORATION EIC E-document System 3.0. A remote attacker can use kw/auth/bbs/asp/getuseremailinfobbs.asp to obtain the contact information name and e-mail address of everyone in the entire organization. This information can allow remote attackers to...
CVE-2021-34683
An issue was discovered in EXCELLENT INFOTEK CORPORATION EIC E-document System 3.0. A remote attacker can use kw/auth/bbs/asp/getuseremailinfobbs.asp to obtain the contact information name and e-mail address of everyone in the entire organization. This information can allow remote attackers to...
Information disclosure
An issue was discovered in EXCELLENT INFOTEK CORPORATION EIC E-document System 3.0. A remote attacker can use kw/auth/bbs/asp/getuseremailinfobbs.asp to obtain the contact information name and e-mail address of everyone in the entire organization. This information can allow remote attackers to...
CVE-2021-34683
An issue was discovered in EXCELLENT INFOTEK CORPORATION EIC E-document System 3.0. A remote attacker can use kw/auth/bbs/asp/getuseremailinfobbs.asp to obtain the contact information name and e-mail address of everyone in the entire organization. This information can allow remote attackers to...
CVE-2021-34683
CVE-2021-34683 affects EXCELLENT INFOTEK CORPORATION (EIC) E-document System 3.0. A remote attacker can access the endpoint kw/auth/bbs/asp/get_user_email_info_bbs.asp to obtain the contact information (names and e-mail addresses) of everyone in the organization, enabling social engineering or br...
CVE-2021-34683
An issue was discovered in EXCELLENT INFOTEK CORPORATION EIC E-document System 3.0. A remote attacker can use kw/auth/bbs/asp/getuseremailinfobbs.asp to obtain the contact information name and e-mail address of everyone in the entire organization. This information can allow remote attackers to...