Mercedes Benz HERMES E Series 缓冲区错误漏洞

Mercedes Benz HERMES E Series is a series of Hermes Edition E Series cars by Mercedes Benz of Germany. A security vulnerability exists in HERMES version 2.1. A remote attacker could execute code via this vulnerability...

PT-2021-14689 · Jenkins · Script Security Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Templating Engine Plugin versions 2.1 and earlier Description: The issue allows attackers with Job/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM. This is due to the lack of protection for...

CVE-2021-25265

A malicious website could execute code remotely in Sophos Connect Client before version 2.1...

PT-2021-10094 · Apache · Apache Cassandra

Name of the Vulnerable Software and Affected Versions: Apache Cassandra versions 2.1.0 through 2.1.22 Apache Cassandra versions 2.2.0 through 2.2.19 Apache Cassandra versions 3.0.0 through 3.0.23 Apache Cassandra versions 3.11.0 through 3.11.9 Description: The issue allows both encrypted and...

Authentication flaw

The affected versions of S+ Operations version 2.1 SP1 and earlier used an approach for user authentication which relies on validation at the client node client-side authentication. This is not as secure as having the server validate a client application before allowing a connection. Therefore, i...

Security Bulletin: A security vulnerability in Node.js serialize-javascript affects IBM Cloud Pak for Multicloud Management Managed Service.

Summary A security vulnerability in Node.js serialize-javascript affects IBM Cloud Pak for Multicloud Management Managed Service. Vulnerability Details Third Party Entry: 186585 DESCRIPTION: Node.js serialize-javascript module code execution CVSS Base score: 9.8 CVSS Temporal Score: See:...

PT-2020-15833 · Phpgurukul · Phpgurukul User Registration & Login/User Management System With Admin Panel

Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management System With admin panel version 2.1 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the Registration page of the admin panel. This type of vulnerability...

CVE-2019-19562

An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to obtain system information...

PT-2020-16255 · Phpgurukul · Phpgurukul User Registration & Login/User Management System With Admin Panel

Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management System With admin panel version 2.1 Description: The issue allows remote attackers to execute arbitrary SQL commands and bypass authentication. This is a SQL injection vulnerability...

PT-2020-16053 · Phpgurukul · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul hostel-management-system version 2.1 Description: The issue allows for XSS attacks through various input fields, including Guardian Name, Guardian Relation, Guardian Contact no, Address, or City. Recommendations: For PHPGurukul...

CVE-2020-23660

webTareas v2.1 is affected by Cross Site Scripting XSS on "Search."...

CVE-2020-5410

Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted UR...

CVE-2020-5410

Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted UR...

DONG JOO CHO File Transfer iFamily Path Traversal Vulnerability

DONG JOO CHO File Transfer iFamily is a file transfer application. A path traversal vulnerability exists in DONG JOO CHO File Transfer iFamily version 2.1. A remote attacker can use this vulnerability to modify the application path in a request to compromise a local application or file system...

Knockout.js 2.1.x < 3.0.0 Cross-site Scripting

According to its self-reported version number, Knockout.js is 2.1.x prior to 3.0.0. Therefore, it may be affected by a cross-site scripting vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source...

Security Bulletin: Vulnerabilities in Apache Commons Compress affects IBM Watson Studio Local

Summary Vulnerabilities in Apache Commons Compress affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-12402 DESCRIPTION: The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted...

DEBIAN-CVE-2013-5743

Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7...

UBUNTU-CVE-2013-5743

Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7...

PT-2019-15772

Name of the Vulnerable Software and Affected Versions Django versions 2.1 through 2.1.14 Django versions 2.2 through 2.2.7 Description The issue allows unintended model editing in certain configurations. When a Django model admin displays inline related models and the user has view-only permissio...

Red Hat JBoss ON Unauthorized Access Vulnerability

Red Hat JBoss ON is the United States Red Hat Red Hat, an open source Java network management software. The software is mainly used to develop, test, deploy and monitor the application life cycle An unauthorized access vulnerability exists in Red Hat JBoss ON version 2.1.x prior to 2.1.2 SP1, whi...