EUVD-2022-35186

Malicious code in bioql PyPI...

EUVD-2022-6606

Malicious code in bioql PyPI...

EUVD-2022-6571

Malicious code in bioql PyPI...

CVE-2022-2965

Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7...

CVE-2022-2871

Cross-site Scripting XSS - Stored in GitHub repository notrinos/notrinoserp prior to 0.7...

CVE-2022-2927

Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7...

CVE-2022-2965

Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7...

CVE-2022-2965

Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7...

CVE-2022-2965

CVE-2022-2965 affects notrinos/notrinoserp (a PHP/MySQL web ERP) prior to version 0.7. The root cause is improper restriction of rendered UI layers/frames (missing X-Frame-Options), enabling clickjacking that could lead to actions such as deleting a user account from the admin context. Public sou...

CVE-2022-2965 Improper Restriction of Rendered UI Layers or Frames in notrinos/notrinoserp

Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7...

CVE-2022-2965 Improper Restriction of Rendered UI Layers or Frames in notrinos/notrinoserp

Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7...

GHSA-QHM8-69QH-G76J Missing password strength check in notrinos/notrinos-erp

In versions of notrinos/notrinoserp prior to 0.7 new account passwords were missing a password strength check...

Missing password strength check in notrinos/notrinos-erp

In versions of notrinos/notrinoserp prior to 0.7 new account passwords were missing a password strength check...

PT-2022-19754 · Unknown · Notrinos/Notrinoserp

Name of the Vulnerable Software and Affected Versions: notrinos/notrinoserp versions prior to 0.7 Description: The issue is related to improper restriction of rendered UI layers or frames. Recommendations: For versions prior to 0.7, update to version 0.7 or later to resolve the issue...

CVE-2022-2927

Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7...

GHSA-44W5-Q257-8428 Exposure of password hashes in notrinos/notrinos-erp

The AP officers account is authorized to Backup and Restore the Database, Due to this he/she can download the backup and see the password hash of the System Administrator account, The weak hash MD5 of the password can be easily cracked and get the admin password...

CVE-2022-2921

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality such as create/update companies, install/update...

CVE-2022-2871

Cross-site Scripting XSS - Stored in GitHub repository notrinos/notrinoserp prior to 0.7...