CVE-2024-33329

A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass authentication and access internal pages and other sensitive information...

CVE-2023-40957

The CVE-2023-40957 issue affects Didotech srl Engineering & Lifecycle Management (pdm) versions 14.0–16.0. The root cause is a SQL injection vulnerability in the models/base_client.py component, which could allow a remote authenticated attacker to execute arbitrary code via the request parameter....

CVE-2023-39558

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

Cross site scripting

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

CVE-2023-39558

Summary: CVE-2023-39558 affects AudimexEE v15.0 with multiple reflected cross-site scripting (XSS) vulnerabilities in the Show Kai Data component. What is affected: AudimexEE version 15.0; vulnerable code path is the Show Kai Data component that reflects input back to the user. Impact (per source...

CVE-2023-39558

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

CVE-2023-39558

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

CVE-2023-37602

An arbitrary file upload vulnerability in the component /workplace!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...

CVE-2023-37602

CVE-2023-37602 affects Alkacon OpenCMS v15.0, specifically the /workplace#!explorer component. The Arbitrary file upload vulnerability allows an attacker to upload a crafted PNG to execute arbitrary code. The NVD entry reports a CVSS v3.1 base score of 6.1 (Medium) with Network access, Low attack...

CVE-2023-37602

An arbitrary file upload vulnerability in the component /workplace!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...

CVE-2022-24323

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...