HCL Unica Campaign 安全漏洞

HCL Unica Campaign is a marketing campaign management solution from HCL India. A security vulnerability exists in HCL Unica Campaign version 12.1.10, which originates from malicious script injection in HTTP requests and could lead to reflective cross-site scripting attacks...

CVE-2024-52606

SolarWinds Platform is affected by server-side request forgery vulnerability. Proper input sanitation was not applied allowing for the possibility of a malicious web request...

SolarWinds Platform 代码问题漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from SolarWinds USA. A code issue vulnerability exists in versions of SolarWinds Platform prior to 2025.1 that stems from a failure to apply proper input cleanup, which could lead to the possibility of...

The vulnerability of the Elasticsearch search engine, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Elasticsearch search engine is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service interruptions through specially crafted HTTP requests...

Malicious HTTP requests could close arbitrary opening file descriptors in cloud-hypervisor

...

The vulnerability of the Fortinet FortiNAC access control device lies in its lack of measures to protect the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the Fortinet FortiNAC network access control device is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted HTTP GET requests...

EVlink City、EVlink Parking和EVlink Smart Wallbox 信息泄露漏洞

Schneider Electric EVlink City and others are a charging solution for electric vehicle charging stations from Schneider Electric France. EVlink City, EVlink Parking, and EVlink Smart Wallbox have an information disclosure vulnerability that The vulnerability stems from the fact that when maliciou...

Vulnerability fixed in SonicWall SonicOS

A vulnerability has been fixed in SonicOS. The vulnerability allows an unauthenticated malicious party to obtain system information through a malicious http request to obtain system information. SonicWall categorizes this vulnerability according to the CVSSv3 method with a score of 5.3. SonicWall...

Denial Of Service (DoS)

asp.net core is vulnerable to denial of service. A remote attacker is able to crash the application via malicious web requests...