CVE-2021-29249

BTCPay Server before 1.0.6.0, when the payment button is used, has a privacy vulnerability...

osCommerce cross-site scripting vulnerability (CNVD-2020-67836)

osCommerce is an open source online shopping e-commerce solution based on the GNUGPL license. A cross-site scripting vulnerability exists in osCommerce CE Phoenix versions prior to 1.0.6.0, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can...

Datto Backup Agent Forgery Vulnerability

Datto Backup Agent is a set of data backup agent software from Datto Inc. in the United States. A forgery vulnerability exists in Datto Backup Agent version 1.0.6.0 and earlier. An attacker can exploit this vulnerability to spoof the Datto Backup Appliance and send requests to the agent...