5 matches found
CVE-2026-102241: Use of Hard-coded Cryptographic Key
A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...
CVE-2014-8082: Exposure of Sensitive Information to an Unauthorized Actor
lib/functions/database.class.php in TestLink before 1.9.13 allows remote attackers to obtain sensitive information via unspecified vectors, which reveals the installation path in an error message...
CVE-2013-7138: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System QCMS 4.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the start parameter...
CVE-2010-2545
Multiple cross-site scripting XSS vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing HPC Solution and other products, allow remote attackers to inject arbitrary web script or HTML via 1 the name element in an XML template to templatesimport.php; and allow remote...
CVE-2009-4237: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the req parameter to login.php, and allow remote authenticated users to inject arbitrary web script or HTML via 2 the key parameter to...