8116 matches found
CVE-2023-34192
Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function...
Ariadna CMS 0.3 Cross Site Scripting
==================================================================================================================================== | Title : Ariadna CMS v.3 - XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2 32-bit | | Vendor ...
CVE-2023-36162
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...
CVE-2023-36162
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...
CVE-2023-36162
Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php...
[SECURITY] Fedora 38 Update: cups-2.4.6-1.fc38
CUPS printing system provides a portable printing layer for UNIX=EF=BF=BD=EF=BF=BD operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...
Fuji Electric V-Server/V-Server Lite Buffer Overflow Vulnerability
Fuji Electric V-Server and Fuji Electric V-Server Lite are both products of Fuji Electric, Japan.Fuji Electric V-Server is a suite of software for collecting and managing real-time field data.Fuji Electric V-Server Lite is a remote monitoring software for industrial environments. Server Lite is a...
Alluxio Cross-Site Scripting Vulnerability
Alluxio is Alluxio's to increase the speed of end-to-end distributed machine learning in the cloud. A cross-site scripting XSS vulnerability exists in Alluxio version v.1.8.1, which can be exploited by a remote attacker to execute arbitrary code via the path parameter in the browseboard component...
libvirt: Memory leak in virPCIVirtualFunctionList cleanup
A vulnerability was found in libvirt. This security flaw occurs due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's gautoptr cleanup...
CVE-2023-3423 Weak Password Requirements in cloudexplorer-dev/cloudexplorer-lite
Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1.2.0...
CVE-2021-31635
Server-Side Template Injection SSTI vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template function...
CVE-2021-31635
Server-Side Template Injection SSTI vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template function...
CVE-2021-31635
CVE-2021-31635 : JFinal v4.9.08 contains a Server-Side Template Injection (SSTI) flaw in the template function that allows remote code execution. The NVD entry assigns a critical 9.8 base score (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Public references and distributor entries (Red Hat, Veracode, GH...
Fuji Electric TELLUS/TELLUS Lite Buffer Overflow Vulnerability (CNVD-2025-16534)
Fuji Electric TELLUS and Fuji Electric TELLUS Lite are both products of Fuji Electric, Japan.Fuji Electric TELLUS is a specialized software for advanced features, user-friendliness and remote control.Fuji Electric TELLUS Lite is a remote control software. A buffer overflow vulnerability exists in...
GHSA-6VF2-MFMR-QQQW Liufee CMS File Upload vulnerability
File Upload vulnerability in Liufee CMS, AKA Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...
CVE-2020-21489
File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...
CVE-2020-21246
Cross Site Scripting vulnerability in YiiCMS v.1.0 allows a remote attacker to execute arbitrary code via the news function...
CVE-2020-20502
Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function...
