17647 matches found
appcms V2.0 has an arbitrary file read vulnerability
appcms is a professional APP content management system that provides various extension modules, such as information, recommended positions, topics, friendly links, body internal links, etc., to help webmasters better personalize their websites. appcms V2.0 has an arbitrary file reading...
CSV Injection vulnerability with exported contact lists in Mautic
Impact Mautic versions before 2.13.0 had a vulnerability that allowed a CSV injection with exported contact lists - https://www.owasp.org/index.php/CSVInjection. Patches Update to 2.13.0 or later. Workarounds None. For more information If you have any questions or comments about this advisory:...
CVE-2020-4873
IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836...
CVE-2020-28476
CVE-2020-28476 is rejected/not used and does not represent an active vulnerability entry; reference CVE-2021-23336.
Weak Password Vulnerability in WayOS Intelligent Routing Management System
WayOS intelligent route management system is designed for small and medium-sized enterprises, Internet cafes, rental houses, supermarkets and other industry scenarios, highlighting Internet behavior management, bandwidth overlay, intelligent QOS, PPP0E authentication server, WeChat WiFi connectio...
CVE-2021-0204
CVE-2021-0204 is a local privilege escalation in Juniper Networks Junos OS, affecting the delta-export configuration utility (dexp). The issue arises because dexp is shipped with setuid root ownership, allowing a locally authenticated shell user to run dexp with root privileges and access sensiti...
Inventory Scan Information
This plugin returns information about an Inventory scan. This plugin is only available to Inventory scans. File data frictionlessassessmentscaninfo.nasl...
Default credentials
A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing PDF files. This could result in an out of bounds write past the end of an allocated structure. An...
Mimecast Certificate Hacked in Supply-Chain Attack
A Mimecast-issued certificate used to authenticate some of the company’s products to Microsoft 365 Exchange Web Services has been “compromised by a sophisticated threat actor,” the company has announced. Mimecast provides email security services that customers can apply to their Microsoft 365...
CVE-2020-26712
REDCap 10.3.4 contains a SQL injection vulnerability in the ToDoList function via the sort parameter. The issue arises from incorporating user-supplied data into a database query without proper validation, enabling attacker-controlled input to affect the query and potentially access or compromise...