PT-2025-21248 · Oa System · Oa System

Name of the Vulnerable Software and Affected Versions: OA System versions prior to 2025.01.01 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the password parameter at the "/mail/MailController.java"...

PT-2006-2087 · Kwik Pay · Kwik-Pay Payroll

Name of the Vulnerable Software and Affected Versions: Kwik-Pay Payroll version 4.2.20 Description: The issue concerns the storage of the KwikPay.mdb database file with insecure permissions, potentially allowing local users to access sensitive information such as employment and payment data. The...

DEBIAN-CVE-2005-1345

Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the httpaccess configuration, which could lead to less restrictive ACLs than intended by the administrator...