1679 matches found
SQL Injection Vulnerability in Crypto M8 Integration Management Platform of Xiamen Crypto Information Technology Co.
Founded in 2007, Xiamen Crypto Information Technology Co., Ltd. is a vendor specializing in the development of integration management software. A SQL injection vulnerability exists in the Crypto M8 Integration Management Platform of Xiamen Crypto Information Technology Co. Ltd, which can be...
Weak password vulnerability in InVid Tech of Shenzhen Tongwei Digital Technology Co.
Shenzhen Tongwei Digital Technology Co., Ltd. is a research and development, production, sales and service in one of the video security field of international - streaming products and system solutions provider. Shenzhen Tongwei Digital Technology Co., Ltd InVid Tech There is a weak password...
CVE-2023-42936
CVE-2023-42936 affects Apple platforms and is connected to Apple’s update fixing an issue where an app may access user-sensitive data due to improved redaction of sensitive information. The public entry lists fixes in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2, iPadOS 17.2, tvOS 17.2, ...
SQL Injection Vulnerability in UFIDA NC Cloud (CNVD-2024-21815)
UFIDA NC Cloud inventory is a large enterprise digitalization platform. UFIDA NC Cloud suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in UFIDA NC Cloud (CNVD-2024-21817)
UFIDA NC Cloud inventory is a large enterprise digitalization platform. UFIDA NC Cloud suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...
Delta Electronics DIAEnergie path traversal vulnerability (CNVD-2025-06623)
Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China, for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and...
GHSA-PC95-3WGM-X28P VvvebJs Reflected Cross-Site Scripting (XSS) vulnerability
A reflected Cross-Site Scripting XSS vulnerability in VvvebJs before version 1.7.5 allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php...
CVE-2024-25567 Delta Electronics DIAEnergie Path traversal
Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten...
Adobe Experience Manager Information Disclosure Vulnerability (CNVD-2024-21669)
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An...
CVE-2023-49453
Reflected cross-site scripting XSS vulnerability in Racktables v0.22.0 and before, allows local attackers to execute arbitrary code and obtain sensitive information via the search component in index.php...
CVE-2023-51786
An issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x before 2.15.4, allows attackers to escalate privileges and obtain sensitive information via Incorrect Access Control...
Huawei HarmonyOS and EMUI Mail Module Improper Access Control Vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. An improper access control vulnerability exists in...
PT-2024-20245 · Likeshop · Likeshop
Name of the Vulnerable Software and Affected Versions: Likeshop versions prior to 2.5.7 Description: The issue allows attackers to view sensitive information. It is related to a Server Side Request Forgery SSRF vulnerability, which can be exploited via the avatar parameter in the...
CVE-2024-25344
Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code and obtain sensitive information via the settings.php, settings+company.php, settingsdefaults.php,settingsintegrations.php,...
CVE-2024-25606
XXE vulnerability in Liferay Portal 7.2.0 through 7.4.3.7, and older unsupported versions, and Liferay DXP 7.4 before update 4, 7.3 before update 12, 7.2 before fix pack 20, and older unsupported versions allows attackers with permission to deploy widgets/portlets/extensions to obtain sensitive...
CVE-2024-25123
MSS Mission Support System is an open source package designed for planning atmospheric research flights. In file: index.py, there is a method that is vulnerable to path manipulation attack. By modifying file paths, an attacker can acquire sensitive information from different resources. The filena...
CVE-2024-20822
Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent...
Information disclosure
Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sensitive information via implicit intent...