CVE-2023-1625 Information leak in api

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

CVE-2023-1625: Exposure of Sensitive Information Through Data Queries

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

CVE-2023-43239

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag5G in showMACfilterMAC...

clareartshow.com.au Cross Site Scripting vulnerability OBB-3689111

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-42268

Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show...

CVE-2023-42268

Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show...

Sql injection

Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show...

jeecg SQL注入漏洞

Jeecg-Boot is a low-code platform based on a code generator. A SQL injection vulnerability exists in Jeecg-Boot v3.5.3 and earlier versions, which stems from a lack of validation of externally entered SQL statements in the component /jeecg-boot/jmreport/show. An attacker can exploit this...

CVE-2023-42268

Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show...

CVE-2023-42268: Improper Neutralization of Special Elements used in an SQL Command

Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show...

CVE-2023-42268

Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show...

clareartshow.com.au Cross Site Scripting vulnerability OBB-3644393

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-39558

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

CVE-2023-39558

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

CVE-2023-39558

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

Cross site scripting

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

CVE-2023-39558: Improper Neutralization of Input During Web Page Generation

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

CVE-2023-39558

Summary: CVE-2023-39558 affects AudimexEE v15.0 with multiple reflected cross-site scripting (XSS) vulnerabilities in the Show Kai Data component. What is affected: AudimexEE version 15.0; vulnerable code path is the Show Kai Data component that reflects input back to the user. Impact (per source...