4767 matches found
PT-2024-39647 · Zoho · Zoho Manageengine Exchange Reporter Plus
Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior Description: The issue concerns an authenticated SQL Injection in the reports module. Recommendations: For versions 5718 and prior, update to a version later than 5718 to...
Half of Online Child Grooming Cases Now Happen on Snapchat, Reports UK Charity
Online grooming crimes against children have reached a record high, with Snapchat being the most popular platform for…...
CVE-2021-22707
creationtimestamp| type| source ---|---|--- 2024-10-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-30 2024-11-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-04 2024-11-10 00:00:00+00:00| exploited| The...
The vulnerability of the Reports component of the Oracle Banking Liquidity Management management platform allows a hacker to gain full control over the application.
The vulnerability of the Reports component of the Oracle Banking Liquidity Management management platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using th...
The vulnerability of the Reports component of the Oracle Banking Liquidity Management platform allows a hacker to gain full control over the application.
The vulnerability of the Reports component of the Oracle Banking Liquidity Management management platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using th...
Fortinet FortiWeb Unauthorized user is granted access to the Reports available in the Log & Report section (FG-IR-21-138)
The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-138 advisory. - An improper access control vulnerability CWE-284 in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report...
CVE-2024-5608
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature...
CVE-2024-5608
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature...
CVE-2024-5608 SQL Injection
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature...
CVE-2024-5608
CVE-2024-5608 affects ManageEngine ADAudit Plus before version 8121. The issue is a SQL Injection in the technician reports feature, enabling an attacker with network access and low privileges to access/modify data (high confidentiality and integrity impact; no availability impact stated). No exp...
CVE-2017-7927
creationtimestamp| type| source ---|---|--- 2024-10-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-24 2024-10-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-24 2024-10-27 00:00:00+00:00| exploited| The Shadowserver...
PT-2024-36708 · Zoho · Zoho Manageengine Adaudit Plus
Name of the Vulnerable Software and Affected Versions: ManageEngine ADAudit Plus versions prior to 8121 Description: The issue concerns SQL Injection in the technician reports feature. Recommendations: For versions prior to 8121, update to version 8121 or later to resolve the issue...
CVE-2024-10276
A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launche...
CVE-2024-10276
Telestream Sentry 6.0.9 contains a cross-site scripting (XSS) vulnerability in the Reports Page component, specifically via the /?page=reports endpoint where manipulating the z argument can be exploited remotely. Several connected sources confirm the vulnerability in Telestream Sentry 6.0.9, with...
CVE-2024-10276 Telestream Sentry Reports Page page cross site scripting
A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launche...
Tektronix Sentry 跨站脚本漏洞
Tektronix Sentry is a video quality monitor from Tektronix. A cross-site scripting vulnerability exists in Tektronix Sentry version 6.0.9, which stems from the Reports Page component's /?page=report location containing a cross-site scripting vulnerability...
PHPGurukul Medical Card Generation System SQL注入漏洞
PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Medical Card Generation System, which stems from the parameter fromdate/todate in the file...
PT-2024-16151 · Telestream · Telestream Sentry
Name of the Vulnerable Software and Affected Versions: Telestream Sentry version 6.0.9 Description: A vulnerability has been found in the Reports Page component of the affected software, specifically in the file "/?page=reports". The manipulation of the z argument leads to cross-site scripting. T...