1878 matches found
CVE-2023-25439
Stored Cross Site Scripting XSS vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitrary code via the description or content fields to the expenses, tasks, and customer details...
Cross site scripting
Stored Cross Site Scripting XSS vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitrary code via the description or content fields to the expenses, tasks, and customer details...
PT-2023-20061 · Square Pig · Fusioninvoice
Name of the Vulnerable Software and Affected Versions: Square Pig FusionInvoice version 2023-1.0 Description: A Stored Cross Site Scripting XSS issue allows attackers to execute arbitrary code via the description or content fields in expenses, tasks, and customer details. This enables malicious...
CVE-2023-25439
Stored Cross Site Scripting XSS vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitrary code via the description or content fields to the expenses, tasks, and customer details...
CyberPower PowerPanel Business Edition 代码问题漏洞
Cyber Power Systems CyberPower PowerPanel Business Edition is a suite of power management software from Cyber Power Systems, USA. The software automates the shutdown of physical and virtual infrastructures and monitors and manages CyberPower UPS systems and network-connected PDUs Power Distributi...
CVE-2023-26061
An issue was discovered in Nokia NetAct before 22 FP2211. On the Scheduled Search tab under the Alarm Reports Dashboard page, users can create a script to inject XSS. Input validation was missing during creation of a scheduled task. For an external attacker, it is very difficult to exploit this,...
Fedora: Security Advisory for ruby (FEDORA-2023-a7be7ea1aa)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: ruby-3.1.4-175.fc37
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
[SECURITY] Fedora 37 Update: rubygem-railties-7.0.4.3-1.fc37
Rails internals: application bootup, plugins, generators, and rake tasks. Railties is responsible to glue all frameworks together. Overall, it: handles all the bootstrapping process for a Rails application; manages rails command line interface; provides Rails generators core;...
[SECURITY] Fedora 38 Update: rubygem-railties-7.0.4.3-1.fc38
Rails internals: application bootup, plugins, generators, and rake tasks. Railties is responsible to glue all frameworks together. Overall, it: handles all the bootstrapping process for a Rails application; manages rails command line interface; provides Rails generators core;...
PT-2023-17116 · Rebuild · Rebuild
Name of the Vulnerable Software and Affected Versions: Rebuild versions up to 3.2.3 Description: A critical issue has been found in Rebuild, affecting some unknown functionality of the file /project/tasks/list. The manipulation leads to sql injection. The attack may be launched remotely...
Rebuild SQL注入漏洞
Rebuild is a highly customizable enterprise management system. A security vulnerability exists in Rebuild 3.2.3 and earlier versions, which stems from the discovery of an SQL injection vulnerability contained in the file /project/tasks/list...
IS Decisions UserLock MFA 安全漏洞
IS Decisions UserLock MFA from IS Decisions protects all employee access to the company's network and cloud applications. A security vulnerability exists in IS Decisions UserLock MFA version 11.01, which stems from vulnerability to attacks that use scheduled tasks to bypass authentication...
PT-2023-18873 · Is Decisions · Is Decisions Userlock Mfa
Name of the Vulnerable Software and Affected Versions: IS Decisions UserLock MFA version 11.01 Description: The issue allows for authentication bypass through the use of scheduled tasks. Recommendations: For IS Decisions UserLock MFA version 11.01, at the moment, there is no information about a...
Fedora: Security Advisory for k3b (FEDORA-2023-a5e10b188a)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2023-24577
McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks...
Design/Logic Flaw
McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks...
Code injection
McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks...
CVE-2023-24577
McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks...