58 matches found
CVE-2025-7182 itsourcecode Student Transcript Processing System edit.php cross site scripting
A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/modules/subject/edit.php. The manipulation of the argument pre leads to cross site scripting. The...
PT-2025-28468 · Itsourcecode · Itsourcecode Student Transcript Processing System
Name of the Vulnerable Software and Affected Versions: itsourcecode Student Transcript Processing System version 1.0 Description: A vulnerability has been found in the itsourcecode Student Transcript Processing System, affecting an unknown functionality of the file /admin/modules/subject/edit.php...
CVE-2025-7182: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/modules/subject/edit.php. The manipulation of the argument pre leads to cross site scripting. The...
edna Chat Center Customer Request Processing System Information Disclosure
The vulnerability of the edna Chat Center’s customer request processing system is related to the improper handling of exceptional states. Exploiting this vulnerability allows a malicious actor to determine the true identities of users...
WhatsApp Is Walking a Tightrope Between AI Features and Privacy
WhatsApp's AI tools will use a new “Private Processing” system designed to allow cloud access without letting Meta or anyone else see end-to-end encrypted chats. But experts still see risks...
IBM CICS TX Advanced Cross-Site Scripting Vulnerability (CNVD-2025-02532)
IBM CICS TX Advanced is a transaction processing monitoring system from International Business Machines IBM for running large-scale, high-transaction-volume applications in enterprise environments. IBM CICS TX Advanced suffers from a cross-site scripting vulnerability that stems from the...
Unauthorized Access Vulnerability in the Remote Processing System for Journal Manuscripts of Beijing Magtech Technology Development Co.
Journal Manuscript Remote Processing System is a platform for remote processing of journal manuscripts developed independently by Beijing Magtech. An unauthorized access vulnerability exists in the Journal Manuscript Remote Processing System of Beijing Magtech Technology Development Co. Ltd, whic...
Delta Electronics DOPSoft Security Vulnerability
Delta Electronics DOPSoft is a set of human machine interface HMI software from Delta Electronics of Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft due to a stack-based buffer overflow vulnerability when parsing the wLogTitlesActionLen field of a DPS file...
Imperative command injection vulnerabilities
Imperative is an open source command processing system from Zowe. Imperative has a security vulnerability that stems from the presence of a command execution vulnerability...
File Upload Vulnerability in the Remote Processing System for Journal Manuscripts of Beijing Magtech Technology Development Co.
Journal Manuscript Remote Processing System is a platform for remote processing of journal manuscripts developed independently by Beijing Magtech. A file upload vulnerability exists in the Journal Manuscript Remote Processing System of Beijing Magtech Technology Development Company Limited, which...
Arbitrary Code Execution
Red Hat Certificate System RHCS is an enterprise software system designed to manage enterprise Public Key Infrastructure PKI deployments. The Token Processing System TPS is a PKI subsystem that acts as a Registration Authority RA for authenticating and processing enrollment requests, PIN reset...
[SECURITY] Fedora 28 Update: botan2-2.7.0-1.fc28
Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...
[SECURITY] [DLA 1306-1] vips security update
Package : vips Version : 7.28.5-1+deb7u2 CVE ID : CVE-2018-7998 Debian Bug : 892589 It was discovered that there was NULL function pointer dereference vulnerability in vips, an image processing system for very large images. Remote attackers could cause a denial of service via a specially-crafted...
Moderate: Red Hat Security Advisory: Red Hat Certificate System 8 security, bug fix, and enhancement update
An update is now available for Red Hat Certificate System 8 with Advanced Access. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Cisco Unified Communications Manager Information Leakage Vulnerability
Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. An information leakage vulnerability exists i...
Override Access Vulnerability in Journalx 2.0, a Remote Processing System for Journal Manuscripts
Journalx 2.0 is an independently developed platform for remote processing of journal manuscripts developed by Beijing Magtech. Journalx 2.0 is vulnerable to an override access vulnerability. The vulnerability can be exploited by an attacker to gain access to other users' usernames, passwords, and...
Format string
Format string vulnerability in the token processing system pki-tps in Red Hat Certificate System RHCS 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the token processing system pki-tps in Red Hat Certificate System RHCS 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 tus/ or 2 tus/tus/...
CVE-2013-1885
Multiple cross-site scripting XSS vulnerabilities in the token processing system pki-tps in Red Hat Certificate System RHCS 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 tus/ or 2 tus/tus/...
CVE-2013-1886
Format string vulnerability in the token processing system pki-tps in Red Hat Certificate System RHCS 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in...