Jizhicms 代码问题漏洞

Extreme Networks Technology JIZHICMS Extreme CMS is a set of open source content management system CMS of China's Extreme Networks Technology Company. Jizhicms v1.5 version of the existence of security vulnerabilities, attackers can take advantage of the vulnerability through the special .jpg fil...

Mz Automation Libiec61850 缓冲区错误漏洞

Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. Mz Automation Libiec61850 A buffer error vulnerability exists in libieciccpmod version 1.5, which stems from a heap buffer overflow vulnerability in the client example1.c component of the libiec icc...

Wage-CMS 跨站请求伪造漏洞

Wage-CMS is a payroll system based on laravel-admin for small and medium-sized businesses. wage-CMS version 1.5.-dev is vulnerable to cross-site request forgery. An attacker can use this vulnerability to add arbitrary users...

Cross site request forgery (csrf)

IBM Cloud Pak for Security CP4S 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request...

Joomla 权限许可和访问控制问题漏洞

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL by the U.S. Open Source Matters team. A vulnerability exists in Joomla! Core 1.5.15 and prior versions 1.5.x in regards to privilege permission and access control issues. The vulnerability arises...

CVE-2021-21537

Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to view and exfiltrate sensitive information on the system...

Dell Hybrid Client 信息泄露漏洞

DELL Dell Hybrid Client is a software application from Dell USA Inc. It provides a client computing software with hybrid cloud management capabilities. An information disclosure vulnerability exists in Dell Hybrid Client versions prior to 1.5, which can be exploited by attackers to obtain sensiti...

CVE-2021-21629

A cross-site request forgery CSRF vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attackers to build a project with attacker-specified parameters...

CSRF vulnerability in build-with-parameters

build-with-parameters 1.5 and earlier does not require POST requests for its form submission endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to build a project with attacker-specified parameters. build-with-parameters 1.5.1 requires POST...

PT-2021-14672 · Jenkins · Jenkins Build With Parameters Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Build With Parameters Plugin versions 1.5 and earlier Description: A cross-site request forgery CSRF vulnerability exists, allowing attackers to build a project with attacker-specified parameters. This issue arises because the plugin...

CVE-2020-24492

Insufficient access control in the firmware for the IntelR 722 Ethernet Controllers before version 1.5 may allow a privileged user to potentially enable a denial of service via local access...

Wdja Cross-Site Scripting Vulnerability

Wdja is a Php-based content management system from the Wdja team. A cross-site scripting vulnerability exists in WDJA CMS version 1.5, where the vulnerability tongji parameter does not do XSS filtering on user input, which can be exploited by an attacker to steal user credentials...

Wdja 跨站脚本漏洞

Wdja is a Php-based content management system from the Wdja team. A cross-site scripting vulnerability exists in WDJA CMS version 1.5, where the vulnerability tongji parameter does not do XSS filtering on user input, which can be exploited by an attacker to steal user credentials...

PT-2020-15036 · Apache · Apache Accumulo

Name of the Vulnerable Software and Affected Versions: Apache Accumulo versions 1.5.0 through 1.10.0 Apache Accumulo version 2.0.0 Description: The issue arises from improper checking of return values of certain policy enforcement functions, specifically the canFlush and canPerformSystemActions...

Design/Logic Flaw

In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects versions 1.2, 1.3, 1.4, 1.5...

CVE-2020-16158

GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMFExpandComplexTYPE. Parsing malicious input can result in a crash or potentially arbitrary code execution...

CVE-2020-15162 Stored XSS in PrestaShop

In PrestaShop from version 1.5.0.0 and before version 1.7.6.8, users are allowed to send compromised files. These attachments allowed people to input malicious JavaScript which triggered an XSS payload. The problem is fixed in version 1.7.6.8...

CloudBees Jenkins computer-queue-plugin cross-site scripting vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

CVE-2016-4074 affecting package jq 1.5-6

CVE-2016-4074 affecting package jq 1.5-6. A patched version of the package is available...

Munkireport munki_facts Cross-Site Scripting Vulnerability

Munkireport is a reporting tool for the Munki software management program. munkifacts is one of the custom data modules. A cross-site scripting vulnerability exists in munkifacts in MunkiReport prior to version 1.5. A remote attacker can exploit this vulnerability to inject arbitrary web script o...