1093 matches found
Teclib GLPI SQL Injection Vulnerability
Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A SQL injection vulnerability exists in Teclib GLPI versions prior to 9.4.6...
The vulnerability of the building management software (management of access control, security systems, video surveillance, and automation) Andover Continuum System, related to the lack of protection for website structures, allows attackers to execute cross-site scripting attacks (XSS attacks) during the use of web server applications.
The vulnerability of the building management software managing access control, security systems, video surveillance, and automation in Andover Continuum System is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to...
The vulnerability of the building management software (management of access control, security systems, video surveillance, and automation) Andover Continuum System, related to the possibility of interference with XML data processing by the application, allows a intruder to gain access to the files in the application server’s file system.
The vulnerability of the building management software management of access control, security systems, video surveillance, and automation Andover Continuum System is related to the possibility of interference with XML data processing by the application. Exploiting this vulnerability can allow a...
Unspecified Vulnerability in ABB System 800xA Information Manager
ABB System 800xA Information Manager is an information management system from ABB Switzerland. The system supports access to real-time and historical information for all applications in the automation system, among other things. A security vulnerability exists in ABB System 800xA Information...
Arbitrary File Deletion Vulnerability in Bitter Chrysanthemum OA
Bitter Chrysanthemum OA office system is a general-purpose collaborative OA management software for small and medium-sized enterprises. Bitter Daisy OA arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete any server file...
CVE-2020-3921 Unisoon UltraLog Express - Sensitive Data Exposure
UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page...
PT-2020-17797 · Ultralog · Ultralog Express
Name of the Vulnerable Software and Affected Versions: UltraLog Express device management software affected versions not specified Description: The issue concerns the storage of user information in cleartext by the UltraLog Express device management software. This allows any user to obtain accoun...
Zyxel CNM SecuManager 3.1.0 / 3.1.1 Hardcoded Keys / XSS / Code Execution
Hello, Please find a text-only version below sent to security mailing lists. The HTML version on "Multiple vulnerabilities found in Zyxel CNM SecuManager" is posted here: https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html === text-version of the advisory ===...
CVE-2020-0546
Unquoted service path in IntelR OptaneTM DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access...
Design/Logic Flaw
Unquoted service path in IntelR OptaneTM DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access...
SQL Injection Vulnerability in Zendo Enterprise Edition
Zendo Enterprise Edition is open source project management software. Zendo Enterprise Edition suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Unspecified Vulnerability in Oracle Hospitality Applications (CNVD-2020-17126)
Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle. The product offers features such as human resource cost management, tracking and management of services throughout a customer's journey to improve customer...
School Management Software PHP/mySQL CSRF Vulnerability
School Management Software PHP/mySQL is a WEB school ERP management program. A cross-site request forgery vulnerability exists in School Management Software PHP/mySQL 2019-03-14 and prior versions. The vulnerability stems from the WEB application not adequately verifying that requests are coming...
CVE-2020-8505
School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=deleteadmin CSRF to delete a user...
CVE-2020-8504
School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=addadmin CSRF to add an administrative user...
CVE-2020-8504
School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=addadmin CSRF to add an administrative user...
CVE-2020-8504
School Management Software PHP/mySQL through 2019-03-14 allows officeadmin/?action=addadmin CSRF to add an administrative user...
CVE-2020-8504
CVE-2020-8504 is a cross-site request forgery in School Management Software PHP/MySQL up to 2019-03-14 that allows an attacker to coerce an authenticated user to create an administrative account via the URL path office_admin/?action=addadmin. The vulnerability's root cause is CSRF lacking adequat...
CVE-2020-8505
CVE-2020-8505 affects School Management Software PHP/MySQL (through 2019-03-14). The vulnerability is a Cross-Site Request Forgery that can trigger office_admin/?action=deleteadmin to delete a user. Documented in NVD with CVSS v2 base 4.3 (Partial integrity impact) and CVSS v3.1 base 6.5 (Partial...