ALLDATA 安全漏洞

ALLDATA is an online resource for automotive OEM information from ALLDATA, Inc. It provides diagnostic and repair information for vehicle manufacturers. A security vulnerability exists in ALLDATA version v0.4.6 that originated from allowing an attacker to run arbitrary commands via the processId...

SEMCMS 安全漏洞

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A security vulnerability exists in SEMCMS version 4.8, which stems from vulnerability to incorrect access control...

Yahoo! JAPAN 安全漏洞

Yahoo! JAPAN is a portal website of Yahoo! A security vulnerability exists in Yahoo! JAPAN versions v2.3.1 through v3.161.1, which originates from an arbitrary script that can be executed via the WebView of an application installed on a user's device...

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions that stems from a cross-site scripting XSS vulnerability in the City field...

CreateWiki 安全漏洞

CreateWiki is Miraheze's MediaWiki extension for requesting and creating wikis. A security vulnerability exists in CreateWiki that could expose suppressed wiki requests to private wikis...

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system by the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions, which stems from a cross-site scripting XSS vulnerability in the Last Name field...

NEC Aterm 安全漏洞

The NEC Aterm is a series of wireless routers from Nippon Electric NEC. A security vulnerability exists in NEC Aterm that originates from allowing an attacker to execute arbitrary commands with root privileges over the Internet. The following products and versions are affected: WG1800HP4,...

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system by the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions, which stems from a cross-site scripting XSS vulnerability in the Street field...

NEC Aterm 安全漏洞

NEC Aterm is a series of wireless routers from Nippon Electric NEC. A security vulnerability exists in NEC Aterm that stems from improper access control. The following products are affected: WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200H...

Tex Live 安全漏洞

TeX Live is a free and open source TeX distribution for typesetting documents. A security vulnerability exists in Tex Live that stems from a discovery in texk/web2c/pdftexdir/writet1.c that contains a null pointer dereference vulnerability...

LangChain 安全漏洞

LangChain builds applications using LLM through composability. A security vulnerability exists in LangChain that originates from allowing an attacker to generate a malicious payload for the parser via LLM, thereby compromising the availability of the service...

CreateWiki 安全漏洞

CreateWiki is Miraheze's MediaWiki extension for requesting and creating wikis. A security vulnerability exists in CreateWiki that originates from exposing information to users who should not have access to that information...

Dell Grab 安全漏洞

Dell Grab is a configuration technology from Dell, Inc. It is used to collect data on hosts connected to Dell EMC storage devices. A security vulnerability exists in Dell Grab version 5.0.4 and earlier, which stems from a system containing an incorrect file permission vulnerability that results i...

GHSA-VXQ2-P937-3PX3 Pinned entity creation form shows wrong data

Impact Logged in user can access page state data of pinned pages of other users by pageId hash. Patch patch --- src/Oro/Bundle/NavigationBundle/Controller/Api/PagestateController.php +++ src/Oro/Bundle/NavigationBundle/Controller/Api/PagestateController.php @@ -158,6 +158,13 @@...

Razor 安全漏洞

Razor is a powerful open source mobile analytics system open-sourced by Cobub China. A security vulnerability exists in Razor version 0.8.0. A remote attacker exploited the vulnerability to escalate privileges via the ChannelModel::updateapk method in channelmodle.php...

Kickdler 安全漏洞

Kickdler is an employee monitoring software from Kickdler Inc. that explores employee computer activity levels to improve productivity and find growth. A security vulnerability exists in versions prior to Kickdler v1.107.0 that stems from the presence of a Reflected Cross-Site Scripting XSS...

Online Marriage Registration System 安全漏洞

Online Marriage Registration System is a website builder that supports online marriage registration. A security vulnerability exists in Online Marriage Registration System version 1.0, which is caused by a cross-site scripting XSS vulnerability in the parameter adminname in the file...

Lychee 安全漏洞

Lychee is a beautiful and easy to use photo management system from The Lychee Organisation open source. It is used to manage and share photos. A security vulnerability exists in Lychee version 3.1.6, which stems from a cross-site request forgery CSRF vulnerability. The vulnerability can be...

Francisco Translate 安全漏洞

Francisco Translate is a library for translating text on a browser or Node.js. A security vulnerability exists in Francisco Translate versions prior to 3.0.0. An attacker could exploit this vulnerability to perform a cache poisoning attack...

Niushop B2B2C 安全漏洞

Niushop niushop b2b2c is a PHP open source e-commerce multi-merchant system from China Niukoo Information Technology Niushop. A security vulnerability exists in Niushop B2B2C v.5.3.3 and earlier versions. An attacker exploited the vulnerability to extract power via the setPrice function of the...