14145 matches found
CVE-2023-6342
The CVE-2023-6342 issue affects Tyler Technologies Court Case Management Plus. A remote attacker could authenticate as any user by manipulating parameters in CmWebSearchPfp/Login.aspx?xyzldk= and payforprint_CM/Redirector.ashx?userid=. The vulnerability’s impact is described as an authentication ...
Tyler Technologies Magistrate Court Case Management Plus Security Vulnerability
Tyler Technologies Magistrate Court Case Management Plus is a district court case management system from Tyler Technologies. A security vulnerability exists in Tyler Technologies Magistrate Court Case Management Plus that originates from storing backups which may contain sensitive information suc...
PT-2023-32619 · Tyler Technologies · Tyler Technologies Court Case Management Plus
Name of the Vulnerable Software and Affected Versions: Tyler Technologies Court Case Management Plus affected versions not specified Description: The issue concerns insufficient permission checks in public court record platforms, allowing unauthorized access to sealed, confidential, and unrelease...
CVE-2023-6354: Improper Authentication
Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the PDFViewer.aspx 'filename' parameter...
Tyler Technologies Magistrate Court Case Management Plus Security Vulnerability
Tyler Technologies Magistrate Court Case Management Plus is a district court case management system from Tyler Technologies. A security vulnerability exists in Tyler Technologies Magistrate Court Case Management Plus. An attacker could exploit the vulnerability to authenticate as any user...
CVE-2023-6342: Improper Authentication
Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprintCM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01...
CVE-2023-6344: Improper Authentication
Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate directories using the tiffserver/te003.aspx or te004.aspx 'ifolder' parameter. This behavior is related to the use of a deprecated version of Aquaforest TIFF Server, possibly 2.x. The vulnerable...
CVE-2023-6375: Files or Directories Accessible to External Parties
Tyler Technologies Court Case Management Plus may store backups in a location that can be accessed by a remote, unauthenticated attacker. Backups may contain sensitive information such as database credentials...
Tyler Technologies Magistrate Court Case Management Plus Authorization Issue Vulnerability
Tyler Technologies Magistrate Court Case Management Plus is a district court case management system from Tyler Technologies. A security vulnerability exists in Tyler Technologies Magistrate Court Case Management Plus. A remote attacker can use the "FN" and "PN" parameters of tiffserver/tssp.aspx ...
CVE-2023-6343: Improper Authentication
Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate and access sensitive files using the tiffserver/tssp.aspx 'FN' and 'PN' parameters. This behavior is related to the use of a deprecated version of Aquaforest TIFF Server, possibly 2.x. The...
Tyler Technologies Magistrate Court Case Management Plus Authorization Issue Vulnerability
Tyler Technologies Magistrate Court Case Management Plus is a district court case management system from Tyler Technologies. A security vulnerability exists in Tyler Technologies Magistrate Court Case Management Plus. A remote attacker can exploit the vulnerability by enumerating directories usin...
PT-2023-32639 · Notepad++ · Notepad++
Name of the Vulnerable Software and Affected Versions: NotePad++ versions up to 8.1 Description: A problematic issue was found in NotePad++, affecting an unknown functionality of the file dbghelp.exe. This leads to an uncontrolled search path. The issue can be exploited locally. Recommendations:...
Tyler Technologies Magistrate Court Case Management Plus Authorization Issue Vulnerability
Tyler Technologies Magistrate Court Case Management Plus is a district court case management system from Tyler Technologies. A security vulnerability exists in Tyler Technologies Magistrate Court Case Management Plus. A remote attacker could use this vulnerability to upload, delete, and view file...
HPESBCR04545 rev.2 - Certain HPE Cray Servers, and HPE ProLiant DL/XL Servers Using Certain AMD EPYC Processors, AMD-SB-7005: Return Address Predictor (INCEPTION) Security Notice, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235n Server - Prior to BIOS 1.3.1 HFP 23.9 HPE Cray EX425 Compute Blade - Prior to BIOS 1.7.2 HFP 23.9 HPE ProLiant DL325 Gen10 Plus server - Prior to BIOS 2.80 H...
Table of Contents Plus < 2309 - Authenticated (Administrator+) Stored Cross-Site Scripting
Description The Table of Contents Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2302 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...
CVE-2023-48646
Zoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary commands via proxy settings...
CVE-2023-48646
Zoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary commands via proxy settings...
PT-2023-7559 · Zoho · Zoho Manageengine Recovery Manager Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine RecoveryManager Plus versions prior to 6070 Description: The issue allows admin users to execute arbitrary commands via proxy settings. This is due to a failure to neutralize special elements, which can be exploited by a...
