15935 matches found
PT-2023-24784 · Kyocera · Kyocera Taskalfa 4053Ci
Name of the Vulnerable Software and Affected Versions: Kyocera TASKalfa 4053ci printers through 2VG S000.002.561 Description: The issue allows identification of valid user accounts via username enumeration. This occurs because the system returns a "nicht einloggen" error rather than a "falsch"...
CVE-2023-45018: Improper Neutralization of Special Elements used in an SQL Command
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database...
PT-2023-7674 · Django +2 · Django +2
Name of the Vulnerable Software and Affected Versions: Django versions 3.2 before 3.2.23 Django versions 4.1 before 4.1.13 Django versions 4.2 before 4.2.7 Description: The issue is related to the NFKC normalization being slow on Windows, which can lead to a potential denial of service DoS attack...
PT-2023-29359
Name of the Vulnerable Software and Affected Versions Online Bus Booking System version 1.0 Description The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the username parameter of the "includes/login.php" resource does not validate the characters received,...
Security Bulletin: IBM Storage Ceph is vulnerable to exposure of sensitive information to an unauthorized actor in Grafana (CVE-2022-39307)
Summary Grafana is used by IBM Storage Ceph as part of the dashboard to monitor the stats for each cluster. CVE-2022-39307 Vulnerability Details CVEID: CVE-2022-39307 DESCRIPTION: Grafana could allow a remote attacker to obtain sensitive information, caused by an error related to the use of the...
Security Bulletin: IBM Storage Ceph is vulnerable to improper authentication in Grafana (CVE-2022-39229)
Summary Grafana is used by IBM Storage Ceph as part of the dashboard to monitor the stats for each cluster. CVE-2022-39229 Vulnerability Details CVEID: CVE-2022-39229 DESCRIPTION: Grafana could allow a remote attacker to bypass security restrictions, caused by improper authentication. By using...
CVE-2023-46451
Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...
CVE-2023-46451
Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...
Cross site scripting
Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...
SUSE CVE-2015-5189
Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another user is authenticated...
SUSE CVE-2017-7488
Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames...
CVE-2023-46451: Improper Neutralization of Input During Web Page Generation
Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...
CVE-2023-46451
Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...
Best Courier Management System Cross-Site Scripting Vulnerability
Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System v1.0, which stems from a cross-site scripting XSS vulnerability in the change username field...
CVE-2023-46451
Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...
CVE-2023-5837
A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affects unknown code of the file profile.php of the component Cookie Handler. The manipulation of the argument username leads to cross site scripting. The attack can be initiated...
CVE-2023-5837
A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affects unknown code of the file profile.php of the component Cookie Handler. The manipulation of the argument username leads to cross site scripting. The attack can be initiated...
CVE-2023-46467
Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page...
Juzaweb CMS Cross-Site Scripting Vulnerability
Juzaweb CMS is a content management system developed by Juzaweb individual developers based on the Laravel framework and Web platform. A cross-site scripting vulnerability exists in Juzaweb CMS v.3.4 and earlier versions that could allow a remote attacker to execute arbitrary code by injecting a...