CVE-2023-34615

An issue was discovered JSONUtil thru 5.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

HP Device Manager 命令注入漏洞

HP Device Manager HPDM is a device manager from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Device Manager versions prior to 5.0.10 that stems from the presence of a command execution or elevation of privilege vulnerability...

HP Device Manager 命令注入漏洞

HP Device Manager HPDM is a device manager from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Device Manager versions prior to 5.0.10 that originates from allowing command injection or elevation of privilege...

HP Device Manager 命令注入漏洞

HP Device Manager HPDM is a device manager from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Device Manager versions prior to 5.0.10 that stems from the presence of a command execution or elevation of privilege vulnerability...

PT-2023-20592 · Hewlett Packard · Hp Device Manager

Name of the Vulnerable Software and Affected Versions: HP Device Manager versions prior to 5.0.10 Description: The issue potentially allows command injection and/or elevation of privileges. Recommendations: For versions prior to 5.0.10, update to version 5.0.10 or later to resolve the issue...

MongoDB Ops Manager 安全漏洞

MongoDB Ops Manager is a solution from MongoDB USA that supports managing, monitoring, and backing up MongoDB deployments. A security vulnerability exists in MongoDB Ops Manager that stems from not editing sensitive PEM key file password application settings. Affected products and versions: Mongo...

Nextcloud Contacts 安全漏洞

Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Contacts 5.0.3 and earlier or 4.2.4 and earlier. No information about this vulnerability is available at this...

mipjz 跨站脚本漏洞

mipjz is sansanyun individual developers of a set of Baidu Mobile Accelerator MIP-based content management system . A security vulnerability exists in mipjz version v5.0.5, which stems from a stored cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or...

WordPress plugin Avirato hotels online booking engine SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PT-2023-8732 · Sap · Sap Netweaver As Java

Name of the Vulnerable Software and Affected Versions: SAP AS NetWeaver JAVA versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50 Description: The issue is related to the lack of authentication for a critical function in SAP AS NetWeaver JAVA, allowing an unauthenticated attacker to attach t...

PT-2023-22497 · S Cms · S-Cms

Name of the Vulnerable Software and Affected Versions: S-CMS version 5.0 Description: The issue is related to an authenticated remote code execution RCE vulnerability. It can be exploited via the /admin/ajax.php API endpoint. Recommendations: For S-CMS version 5.0, consider disabling access to th...

CVE-2023-30328

An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...

CVE-2023-1282

The Drag and Drop Multiple File Upload PRO - Contact Form 7 Standard WordPress plugin before 2.11.1 and Drag and Drop Multiple File Upload PRO - Contact Form 7 with Remote Storage Integrations WordPress plugin before 5.0.6.4 do not sanitise and escape a parameter before outputting it back in the...

WordPress Plugin Multi Rating 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2022-38063 WordPress Social Login WP Plugin <= 5.0.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Social Login WP plugin = 5.0.0.0 versions...

WordPress plugin Social Login 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Gigamon GigaVUE-OS 跨站脚本漏洞

Gigamon GigaVUE-OS is an operating system for GigaVUE network devices from Gigamon Corporation, USA. A security vulnerability exists in Gigamon GigaVUE-OS version 5.0 202, which stems from a discovery containing a Reflective Cross-Site Scripting XSS vulnerability. An attacker could exploit the...

Neo4j 代码问题漏洞

Neo4j is a Java-based and fully ACID-compatible graphical database from the U.S. company Neo4j, which supports data migration, add-ons and more. A code issue vulnerability exists in Neo4j versions prior to 5.5.0 that stems from the presence of an XML External Entity XXE vulnerability, which can b...

SUSE CVE-2005-0004

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files...

SUSE CVE-2006-1518

Buffer overflow in the opentable function in sqlbase.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COMTABLEDUMP packets with invalid length values...