Veritas NetBackup 代码问题漏洞

Veritas NetBackup is a powerful enterprise-level data backup management software developed by Veritas Corporation in the United States. Version 7.0 of Veritas NetBackup contains a code vulnerability. This vulnerability stems from the lack of quotation marks around the NetBackup INET Daemon servic...

CVE-2020-37008

CVE-2020-37008 affects EasyPMS 1.0.0. The vulnerability is an authentication bypass that lets unprivileged users manipulate SQL queries in JSON requests by injecting single quotes in ID parameters, allowing access to admin user information and potential modification of admin passwords without pro...

Nord VPN code-related vulnerabilities

Nord VPN is a proxy software developed by the Nord VPN company. Version 6.31.13.0 of Nord VPN contains a code vulnerability. This vulnerability stems from the lack of quotation marks around the nordvpn-service service path, which may allow local attackers to execute code with elevated privileges...

Gear Box Computers IP Watcher code issues and vulnerabilities

Gear Box Computers IP Watcher is a network monitoring tool developed by Gear Box Computers. Version 3.0.0.30 of Gear Box Computers IP Watcher has a code vulnerability; this vulnerability stems from Windows service configurations that include service paths without quotes, which may allow arbitrary...

EUVD-2026-4661

dcap-qvl implements the quote verification logic for DCAP Data Center Attestation Primitives. A vulnerability present in versions prior to 0.3.9 involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral including qeidentity,...

CVE-2026-22696 dcap-qvl has Missing Verification for QE Identity

dcap-qvl implements the quote verification logic for DCAP Data Center Attestation Primitives. A vulnerability present in versions prior to 0.3.9 involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral including qeidentity,...

dcap-qvl has Missing Verification for QE Identity

Impact This vulnerability involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral including qeidentity, qeidentitysignature, and qeidentityissuerchain from the PCCS. However, it skips to verify the QE Identity signature...

MiniTool ShadowMaker code-related vulnerabilities

MiniTool ShadowMaker is a data backup and disaster recovery software developed by the British company MiniTool. Version 3.2 of MiniTool ShadowMaker contains a code vulnerability; this vulnerability stems from the lack of quotation marks around the MTAgentService service path, which may allow...

PT-2026-4820

Name of the Vulnerable Software and Affected Versions dcap-qvl versions prior to 0.3.9 Description The dcap-qvl library contains a flaw in its quote verification logic. The library retrieves QE Identity collateral from the PCCS, but fails to verify the QE Identity signature against its certificat...

Kite code issue vulnerabilities

Kite is an AI code development tool developed by the Kite company in the United States. Version Kite 1.2020.1119.0 contains a code vulnerability. This vulnerability stems from the lack of quotation marks around the KiteService service path, which may allow for the execution of arbitrary code...

Softros LogonExpert code issue vulnerability

Softros LogonExpert is a security automatic login management tool developed by the American company Softros. Version 8.1 of Softros LogonExpert contains a code vulnerability; this vulnerability arises from the service path not being enclosed in quotes, which may allow arbitrary code to be execute...

Luidia eBeam Education Suite code-related vulnerabilities

The Luidia eBeam Education Suite is an interactive teaching software suite developed by Luidia Corporation. Version 2.5.0.9 of the Luidia eBeam Education Suite contains a code vulnerability. This vulnerability stems from the eBeam Device Service having a service path that lacks quotation marks,...

Microsoft VFS for Git code issue vulnerability

Microsoft VFS for Git is a Git optimization system developed by Microsoft Corporation in the United States. Version 1.0.21014.1 of Microsoft VFS for Git contains a code vulnerability. This vulnerability stems from the Windows service GVFS.Service having a service path that lacks quotes, which may...

EUVD-2026-3298

teklifolusturapp is a web-based PHP application that allows users to create, manage, and track quotes for their clients. Prior to commit dd082a134a225b8dcd401b6224eead4fb183ea1c, an Insecure Direct Object Reference IDOR vulnerability exists in the offer view functionality. Authenticated users can...

Teklif Management System security vulnerabilities

Teklif Yönetim Sistemi is a management and tracking software for individual developers developed by sibercii6-crypto. Teklif Yönetim Sistemi has a security vulnerability, which stems from the lack of an authorization check in the quote viewing function. This vulnerability could allow authenticate...

PT-2026-3484

Name of the Vulnerable Software and Affected Versions teklifolustur app versions prior to commit dd082a134a225b8dcd401b6224eead4fb183ea1c Description teklifolustur app is a web-based PHP application for managing quotes. An Insecure Direct Object Reference IDOR exists in the offer view...

MiracleLinux 4 : augeas-1.0.0-5.AXS4.1 (AXSA:2014-034:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2014-034:01 advisory. A library for programmatically editing configuration files. Augeas parses configuration files into a tree structure, which it exposes through its...

CVE-2025-67082

An SQL injection vulnerability in InvoicePlane through 1.6.3 has been identified in "maxQuantity" and "minQuantity" parameters when generating a report. An authenticated attacker can exploit this issue via error-based SQL injection, allowing for the extraction of arbitrary data from the database...

CVE-2025-67082

The CVE-2025-67082 entry concerns InvoicePlane versions up to 1.6.3. The vulnerability is an SQL injection in the maxQuantity and minQuantity parameters when generating a report, exploitable via error-based SQL injection by an authenticated user. The issue stems from insufficient sanitization of ...

PT-2026-2307

Name of the Vulnerable Software and Affected Versions WebErpMesv2 versions prior to 1.19 Description The WebErpMesv2 application lacks authentication middleware for multiple sensitive API endpoints. This allows an unauthenticated remote attacker to read business-critical data, including companies...