Dr Trust USA iCheck Connect BP Monitor BP Testing 118 操作系统命令注入漏洞

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 is a digital blood pressure monitor and tester from Dr Trust. Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to an operating system command injection vulnerability. The vulnerability stems from a vulnerability to pla...

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 OS Command Injection Vulnerability

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 is a digital blood pressure monitor and tester from Dr Trust. Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to an operating system command injection vulnerability. The vulnerability stems from a vulnerability to pla...

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 安全漏洞

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 is a digital blood pressure monitor and tester from Dr Trust. A security vulnerability exists in Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1, which stems from vulnerability to replay attacks against BP Monitoring. No detailed...

Dr Trust USA iCheck Connect BP Monitor BP Testing 118访问控制错误漏洞

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 is a digital blood pressure monitor and tester from Dr Trust. Dr Trust USA iCheck Connect BP Monitor BP Testing 118 is vulnerable to an access control error, for which no details are currently available No details of the vulnerability are...

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 代码问题漏洞

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 is a digital blood pressure monitor and tester from Dr Trust. Dr Trust USA iCheck Connect BP Monitor BP Testing 118 is vulnerable to a code issue, no details of the vulnerability are available at this time. Details of the vulnerability are not...

Dr Trust USA iCheck Connect BP Monitor BP Testing 118代码问题漏洞

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 is a digital blood pressure monitor and tester from Dr Trust. Dr Trust USA iCheck Connect BP Monitor BP Testing 118 is vulnerable to a code issue, no details of the vulnerability are available at this time. Details of the vulnerability are not...

Download Monitor < 4.5.91 - Admin+ Arbitrary File Download

The plugin does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup. PoC Create a new download, add a file and put the...

Download Monitor < 4.5.91 - Admin+ Arbitrary File Download

The plugin does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup. Create a new download, add a file and put the followi...

Vembu BDR Suite 代码问题漏洞

Vembu BDR Suite is a virtual machine management system. A security vulnerability exists in Vembu BDR Suite 4.2.0.1, no information about the vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2021-23450)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...

CVE-2022-28153

Jenkins SiteMonitor Plugin 0.6 and earlier does not escape URLs of sites to monitor in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-28153

Jenkins SiteMonitor Plugin 0.6 and earlier does not escape URLs of sites to monitor in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Jenkins SiteMonitor Plugin 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exist...

PT-2022-18852 · Jenkins · Jenkins Sitemonitor Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins SiteMonitor Plugin version 0.6 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because URLs of sites to monitor in tooltips are not properly escaped, allowing attackers with...

Security Bulletin: MAS Monitor 8.4, 8.5, and 8.6 log4j

Summary A new vulnerability with log4j has been detected. MAS Monitor uses log4j in all releases and interim fixes are now available for our 8.4, 8.5 and 8.6 releases. More details of the vulnerability are available here: https://nvd.nist.gov/vuln/detail/CVE-2021-44228 Vulnerability Details...

Security Bulletin: CVE-2021-44228 log4j affects MAS Monitor 8.4, 8.5 and 8.6

Summary A new vulnerability with log4j has been detected. MAS Monitor uses log4j in all releases and interim fixes are now available for our 8.4, 8.5 and 8.6 releases. More details of the vulnerability are available here: https://nvd.nist.gov/vuln/detail/CVE-2021-44228 Vulnerability Details CVEID...

WordPress Download Monitor Plugin Cross-Site Scripting (CVE-2021-23174)

A stored cross-site scripting vulnerability exists in Download Monitor Plugin for WordPress. The vulnerability is due to insufficient sanitization of user-supplied data in posttitle parameter...

PT-2022-18380 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idcCMS version 1.10 Description: The issue allows attackers to arbitrarily delete the install.lock file, resulting in a reset of the CMS settings and data. Recommendations: For idcCMS version 1.10, consider restricting access to the...

Security Bulletin: Multiple vulnerabilities fixed in IBM Maximo Application Suite Monitor

Summary IBM Maximo Application Suite Monitor is vulnerable to Multiple vulnerabilities. See Vulnerability Details. This has been addressed in each of the components; refer to the Remediation section for details. Vulnerability Details CVEID: CVE-2020-15265 DESCRIPTION: Tensorflow is vulnerable to ...

WordPress Download Monitor plugin arbitrary file download vulnerability

WordPress is a blogging platform developed using the PHP language. File Upload is a file upload plugin used in it. WordPress plugin is an application plugin. WordPress Download Monitor plugin version 4.4.6 and previous versions are vulnerable to arbitrary file download. stems from the fact that t...