CVE-2025-7329: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation...

PT-2023-19867

Name of the Vulnerable Software and Affected Versions RIFARTEK IOT Wall affected versions not specified Description The issue concerns incorrect authorization, allowing an authenticated remote attacker with general user privilege to perform specific privileged functions. This enables the attacker...

CVE-2022-2138: Missing Authentication for Critical Function

The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute arbitrary code, resulting in a denial-of-service condition...

PT-2022-9833

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk AssetCentre versions 10.00 and earlier Description The issue is related to improper restriction of functions related to IIS remoting services, which may allow a remote, unauthenticated attacker to modify sensiti...

PT-2021-10530

Name of the Vulnerable Software and Affected Versions: Nuishop version 2.3 Description: The issue is a SQL injection vulnerability located in the /goods/getGoodsListByConditions/ endpoint. This vulnerability can potentially be exploited to extract or modify sensitive data from the database...

CVE-2018-0322

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to modify sensitive data that is associated with arbitrary accounts on an affected device. The vulnerability is due to a failure to enforce access restrictio...

Cisco Prime Collaboration Provisioning Access Control Vulnerability

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to modify sensitive data that is associated with arbitrary accounts on an affected device. The vulnerability is due to a failure to enforce access restrictio...

CVE-2001-0135

CVE-2001-0135 affects Ultraboard 2000, version 2.11. The default install creates Skins, Database, and Backups directories with world-writable permissions, enabling a local user to modify sensitive information or potentially insert and execute CGI programs. The connected OpenVAS/Nessus entries ref...