UPS management application Search Uncontrolled Data Compromise

The vulnerability of the UPS management application is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

EUVD-2012-5532

Malware in sbrugna...

Adobe Substance 3D Modeler Code Execution

The vulnerability of the Adobe Substance 3D Modeler software for 3D modeling is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

SAP Product Lifecycle Costing Client Information Disclosure

The vulnerability of the SAP Product Lifecycle Costing Client software is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to disclose sensitive information...

Exim Unauthorized Access

The vulnerability of the Exim mail server’s SMTP service is related to the issue of operations going beyond the buffer in memory when implementing a DNSDB-style search mechanism. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

PT-2021-3522

Name of the Vulnerable Software and Affected Versions OpenVPN versions prior to 2.5.3 Description The issue is related to errors in the path search mechanism of the OpenSSL library in OpenVPN software. Exploitation of this issue may allow an attacker to execute arbitrary code. Local users can loa...

Workspace Environment Management (WEM): Active Directory search improvements in WEM 4.6

Introduction The Active Directory AD system built into the WEM Administration Console and WEM Infrastructure Server has been refactored in WEM 4.6 to improve performance and stability. Although AD searches performed by the WEM Console and WEM Infrastructure server in previous WEM versions have...

International Islamic University Chittagong: Reflected XSS

Summary: add summary of the vulnerability Description: search mechanism uses POST method to request for search . So if we change it to get normally the XSS dosen't popup . But if we break it with " this we can get XSS . Platforms Affected: https://ieeeiiucsb.org/search/" Steps To Reproduce: Visit...

CVE-2012-5648

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 app/models/hostext/search.rb or 2 app/models/puppetclass.rb, related to the search mechanism...

Sql injection

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 app/models/hostext/search.rb or 2 app/models/puppetclass.rb, related to the search mechanism...

CVE-2012-5648

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 app/models/hostext/search.rb or 2 app/models/puppetclass.rb, related to the search mechanism...

CVE-2012-5648

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 app/models/hostext/search.rb or 2 app/models/puppetclass.rb, related to the search mechanism...

CVE-2012-5648: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 app/models/hostext/search.rb or 2 app/models/puppetclass.rb, related to the search mechanism...

CVE-2008-2518

Cross-site scripting XSS vulnerability in the advanced search mechanism webapps/search/advanced.jsp in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter...

Security Advisory: CA CleverPath SQL Injection

Background ========== The CA Clever Path Portal is a customizable portal for aggregation and integration of data and applications. It is integrated into multiple CA products including various Unicenter components. The CA CleverPath utilizes a back end Database for storing data and allows usage of...