O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA open source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from a cross-site scripting error in the parameter name/shortName/distinguishedName/pinyin/ in the file...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA open source. A security vulnerability exists in O2OA version 10.0-410 and earlier, which originates from cross-site scripting due to incorrect manipulation of parameters in the file /xprogramcenter/jaxrs/agent...

Portábilis i-Educar 安全漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you in basic and technical education. A security vulnerability exists in Portábilis i-Educar version 2.10 and earlier, which stems from improper authorization due to incorrect manipulation of parameters in the file...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA open source. A security vulnerability exists in O2OA version 10.0-410 and earlier, which originates from cross-site scripting due to incorrect manipulation of parameters in the file /xcmsassemblecontrol/jaxrs/form...

Harness 安全漏洞

Harness is a development platform open-sourced by Harness. A security vulnerability exists in Harness versions prior to 3.3.0, which stems from an improperly cleaned upload path that could lead to arbitrary file writes...

i-Educar 安全漏洞

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10 and earlier, which stems from a SQL injection attack due to a mishandling of the parameter ID in the file /module/FormulaMedia/view...

Xinhu RockOA 安全漏洞

Xinhu RockOA is an office OA system of China Xinhu Xinhu Company. A security vulnerability exists in Xinhu RockOA 2.6.9 and earlier versions, which originates from an improper authorization issue in the publicsaveAjax function in file/index.php...

SolidInvoice 安全漏洞

SolidInvoice is an invoice solution application from SolidInvoice Open Source. A security vulnerability exists in SolidInvoice version 2.3.7, which stems from the tax rate feature being vulnerable to cross-site scripting attacks...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple USA. A security vulnerability exists in Apple macOS that stems from a permissions issue that could lead to malicious applications gaining root access...

Diebold Nixdorf Vynamic Security Suite 安全漏洞

Diebold Nixdorf Vynamic Security Suite Diebold Nixdorf VSS is a security access suite from Diebold Nixdorf, USA. A security vulnerability exists in Diebold Nixdorf Vynamic Security Suite version 4.3.0 SR01 and prior versions, which stems from insufficient validation of file attributes and could...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from a cross-site scripting due to the incorrect operation of the parameter name/alias/description in the file...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from cross-site scripting due to incorrect operation of the parameter toMonthViewName in the file...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by Nilson Lazarin Individual Developer. A security vulnerability exists in WeGIA versions prior to 3.4.11 that stems from insufficient file upload validation and could lead to remote code execution...

Code-Projects Student Information Management System 安全漏洞

Code-Projects Student Information Management System is a Code-Projects open source student information management system. A security vulnerability exists in Code-Projects Student Information Management System version 1.0, which originates from a cross-site scripting attack due to misuse of the...

Malicious code in @nx/node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b11cb4be7497510402676b2b593e6a5d3e0dee4e1443996403e8aa496f284f3 Summary Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans the file...

Digital Arts i-FILTER 安全漏洞

Digital Arts i-FILTER is a web filtering software from Digital Arts Japan. It is used to counter targeted attacks. A security vulnerability exists in Digital Arts i-FILTER that stems from improper default permissions and could lead to arbitrary code execution...

AiShu AnyShare 安全漏洞

AiShu AnyShare is an enterprise content management platform from China-based AiShu. AiShu AnyShare has a security vulnerability that originates from an unauthenticated and uncleaned input to the ServiceAgent API, which could lead to remote code execution...

Coolify 安全漏洞

Coolify is an open source and self-hosted Heroku/Netlify/Vercel replacement from coolLabs Open Source. A security vulnerability exists in versions prior to Coolify v4.0.0-beta.420.6, which stems from a remote code execution in the application deployment workflow that could result in gaining root...

Mahara 安全漏洞

Mahara is a free and open source web-based ePortfolio management system from Mahara. A security vulnerability exists in Mahara versions 23.04.8 and 24.04.4 that stems from a maliciously exported download URL that could lead to the download of unauthorized files...

Agiloft 安全漏洞

Agiloft is a contract management platform from Agiloft Corporation in the United States. Agiloft has a security vulnerability that originates from the download of critical system packages over an insecure HTTP connection, which could lead to a man-in-the-middle attack...