7425 matches found
CVE-2021-42956
CVE-2021-42956 affects Zoho ManageEngine Remote Access Plus Server for Windows, up to version 10.1.2132.6. Root cause: improper privilege management causes the server process to run as the logged-in user, enabling memory dump by non-admins. Impact: attacker could remotely dump sensitive informati...
CVE-2021-42956
Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...
ShowDoc Cross-Site Request Forgery Vulnerability (CNVD-2021-89159)
ShowDoc is an open source tool for IT teams to share documents online.ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, which can be exploited by attackers to cause a...
Snipe-IT Cross-site Request Forgery Vulnerability
Snipe-IT is an open source IT asset/license management system. Snipe-IT is vulnerable to cross-site request forgery, which stems from a lack of csrf checksum for POST requests in the software's view.blade.php file, and can be exploited by attackers to launch cross-site request forgery attacks...
Snipe-IT Cross-Site Scripting Vulnerability
Snipe-IT is an open source IT asset/license management system. Snipe-IT has a cross-site scripting vulnerability that stems from the lack of filtering and escaping of user-submitted data in AssetsController, for which no detailed vulnerability details are currently available...
ShowDoc Cross-Site Request Forgery Vulnerability
ShowDoc is an open source tool for IT teams to share documents online. ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, and can be exploited by attackers to cause...
snipe-it is vulnerable to Cross-site Scripting
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
GHSA-2CQG-Q7JM-J35C snipe-it is vulnerable to Cross-site Scripting
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-533P-CP2G-99WP snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
Better Together: XDR, SOAR, Vulnerability Management, and External Threat Intelligence
One of the biggest challenges with both incident response and vulnerability management is not just the raw number of incidents and vulnerabilities organizations need to triage and manage, but the fact that it's often difficult to separate the critical incidents and vulnerabilities from the minor...
Cross-site Scripting (XSS)
snipe/snipe-it is vulnerable to cross-site scripting. The library does not properly escape assettag in the bulk checkout, allowing attackers to inject and execute malicious javascript...
CVE-2021-3938
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3938
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3931
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3931
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3931
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...