1024 matches found
SiAdmin SQL注入漏洞
SiAdmin is an application. SiAdmin version 1.1 suffers from a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability that allows a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in it...
SiAdmin SQL注入漏洞
SiAdmin is an application. SiAdmin version 1.1 suffers from a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability that allows a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in it...
PT-2024-25870 · WordPress · Wpcs
Name of the Vulnerable Software and Affected Versions: WPCS WordPress Custom Search versions 1.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically Stored XSS...
E-TRUST Horacius 安全漏洞
E-TRUST Horacius is a comprehensive IAM system from E-TRUST Corporation. A security vulnerability exists in E-TRUST Horacius versions 1.0, 1.1, and 1.2 that originates from a vulnerability that allows a local attacker to escalate privileges via the password reset feature...
WordPress plugin Mhr Post Ticker 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
OneThink 安全漏洞
OneThink is an open source content management framework. A security vulnerability exists in OneThink version v.1.1, which stems from an arbitrary code execution vulnerability in the AddonsController.class.php component...
WordPress plugin Easy Set Favicon 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
PHPGurukul Client Management System 安全漏洞
PHPGurukul Client Management System is a client management system from the U.S.-based PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Client Management System version 1.1, which originates from the presence of cross-site scripting that allows an attacker to execute arbitrary code a...
PHPGurukul Client Management System 安全漏洞
PHPGurukul Client Management System is a client management system from the US-based PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Client Management System version 1.1, which originates from the presence of cross-site scripting that allows an attacker to execute arbitrary code...
PHPGurukul Client Management System 安全漏洞
PHPGurukul Client Management System is a client management system from PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Client Management System version 1.1, which originates from a vulnerability that allows attackers to conduct SQL injection attacks...
PT-2024-21219 · Indianic · Indianic Widgets Controller
Name of the Vulnerable Software and Affected Versions: IndiaNIC Widgets Controller versions 1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker...
Musicshelf Security Breach
Musicshelf is a music shelf software by RedNesto Individual Developer. It is used to help manage sheet music and various related assets. A security vulnerability exists in Musicshelf versions 1.0, 1.1, which stems from the inclusion of unknown functions in androidmanifest.xml in the component...
CVE-2024-23262
This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 1.1, iOS 17.4 and iPadOS 17.4, iOS 16.7.6 and iPadOS 16.7.6. An app may be able to spoof system notifications and UI...
Apple visionOS Security Vulnerability
Apple visionOS is an operating system for AR glasses from Apple USA. A security vulnerability exists in Apple visionOS version 1.1, which stems from the fact that unauthenticated users may be able to use unprotected roles...
Apple visionOS Security Vulnerability
Apple visionOS is an operating system for AR glasses from Apple USA. A security vulnerability exists in Apple visionOS version 1.1, which stems from an application that may be able to fingerprint users...
PT-2024-19757 · Apple · Visionos +2
Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 1.1 iOS versions prior to 17.4 iOS versions prior to 16.7.6 iPadOS versions prior to 17.4 iPadOS versions prior to 16.7.6 Description: An app may be able to spoof system notifications and UI. This issue was addresse...
Apple visionOS Security Vulnerability
Apple visionOS is an operating system for AR glasses from Apple USA. A security vulnerability exists in Apple visionOS version 1.1, which stems from an application that may be able to spoof system notifications and UI...
CVE-2024-24112
xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter...
PT-2024-20276 · Xmall · Xmall
Name of the Vulnerable Software and Affected Versions: xmall version 1.1 Description: The issue is a SQL injection vulnerability. It occurs via the orderDir parameter. Recommendations: For xmall version 1.1, as a temporary workaround, consider restricting the use of the orderDir parameter until a...
