2763 matches found
CVE-2024-44757
CVE-2024-44757 describes an arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0, exploitable via a crafted interface request that can expose sensitive files. The initial data indicates a high-severity impact (C:H/I:N/A:N, CVSS 3....
CVE-2024-44757
An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...
CVE-2024-44758
An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...
CVE-2024-44759
An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...
CVE-2024-44759
An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...
PT-2024-31237 · Unknown · Nus-M9 Erp Management
Name of the Vulnerable Software and Affected Versions: NUS-M9 ERP Management Software version 3.0.0 Description: An arbitrary file upload issue in the /Production/UploadFile component allows attackers to execute arbitrary code by uploading crafted files. Recommendations: For NUS-M9 ERP Management...
CVE-2024-44758
CVE-2024-44758 describes an arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 . Multiple sources (NVD, Red Hat, CVE databases) identify that uploading crafted files can lead to arbitrary code execution. The CVSS v3.1 vector indica...
NUS-M9 安全漏洞
NUS-M9 is an ERP system from China Zhelin NUS Company. A security vulnerability exists in NUS-M9 v3.0.0, which is caused by an arbitrary file upload vulnerability in the /Production/UploadFile component. An attacker can exploit this vulnerability to execute arbitrary code by uploading a specially...
CVE-2024-44758
An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...
CVE-2024-44759
An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...
CVE-2024-44759
CVE-2024-44759 affects NUS-M9 ERP Management Software v3.0.0. The vulnerability resides in the component /Doc/DownloadFile, enabling an arbitrary file download via a crafted interface request and potentially exposing sensitive information. The advisory/entries consistently describe this as a file...
CVE-2024-44759
An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...
CVE-2024-44758
An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...
PT-2024-31238 · Unknown · Nus-M9 Erp Management
Name of the Vulnerable Software and Affected Versions: NUS-M9 ERP Management Software version 3.0.0 Description: An arbitrary file download issue in the /Doc/DownloadFile component allows attackers to download arbitrary files and access sensitive information via a crafted interface request...
CVE-2024-51156
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery CSRF via the component 'erp.07fly.net:80/admin/SysNotifyUser/del.html?id=93'...
07FLYCMS 安全漏洞
07FLYCMS is a free and open source content management system CMS of China Zero Takeoff 07FLY company, which can be used independently to meet the needs of various types of enterprise website development and construction! A security vulnerability exists in 07FLYCMS version V1.3.9, which originated...
CVE-2024-51156
07FLYCMS v1.3.9 is affected by a CSRF vulnerability in the component erp.07fly.net:80/admin/SysNotifyUser/del.html?id=93. The issue enables unauthorized requests causing potential state changes without user consent. No exploit details or patch/version fixes are provided in the connected documents...
CVE-2024-51157
CVE-2024-51157 affects 07FLYCMS V1.3.9 with a CSRF vulnerability in the /oa/OaSchedule/add.html endpoint. The CVSS-3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) yields a base score of 4.7 (Medium). Exploitation details are not provided beyond the CSRF description; no public fix/version remedia...
kernel: mlxsw: spectrum_acl_erp: Fix object nesting warning
A flaw incorrect memory access in the Linux kernel Mellanox network Ethernet or RDMA device driver was found. A local user could use this flaw to crash the system...