Code injection

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to an account compromise...

CVE-2021-25219

In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 - 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response...

SonicWall Global Management System Command Execution Vulnerability

The SonicWall Global Management System GMS provides a holistic approach to managing the entire network security environment by business process and service level. A command execution vulnerability exists in SonicWall GMS version 9.3. An attacker could exploit the vulnerability to locally elevate...

SonicWall Global Management System 授权问题漏洞

The SonicWall Global Management System GMS provides a holistic approach to managing the entire network security environment by business process and service level. A command execution vulnerability exists in SonicWall GMS version 9.3. An attacker could exploit the vulnerability to locally elevate...

Unspecified Vulnerability in Secomea GateManager

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager versions prior to 9.3, which can be exploited by an attacker to potentially conduct Web caching attacks...

Unspecified Vulnerability in Secomea GateManager (CNVD-2021-18013)

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager versions prior to 9.3, which allows an attacker to exploit the vulnerability to access sensitive cookies...

CVE-2020-29025

A vulnerability in SiteManager-Embedded SM-E Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. Thi...

Design/Logic Flaw

A vulnerability in SiteManager-Embedded SM-E Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. Thi...

Design/Logic Flaw

Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3...

CVE-2020-29025 DOM-based Javascript injection

A vulnerability in SiteManager-Embedded SM-E Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. Thi...

Design/Logic Flaw

A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3...

Quali CloudShell Cross-Site Scripting Vulnerability (CNVD-2021-06529)

Quali CloudShell is a cloud service from Quali USA for managing infrastructure provisioning, cloud orchestration, automated deployments and more in cloud environments. A cross-site scripting vulnerability exists in Quali CloudShell version 9.3 that originates on the login page and can be exploite...

Authentication flaw

ABB MicroSCADA Pro SYS600 version 9.3 suffers from an instance of CWE-306: Missing Authentication for Critical Function...

PT-2020-11147 · Abb · Abb Microscada Pro Sys600

Name of the Vulnerable Software and Affected Versions: ABB MicroSCADA Pro SYS600 version 9.3 Description: The issue is related to missing authentication for a critical function, as described by the instance of CWE-306. This means that the software lacks proper authentication mechanisms, potential...

CVE-2019-11653

Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request...

ZOHO ManageEngine ServiceDesk Plus Cross-Site Scripting Vulnerability (CNVD-2019-16940)

ZOHO ManageEngine ServiceDesk Plus is a set of ITIL-based IT service management software ITSM from ZOHO. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management and other functional modules. A cross-site scripti...

ZOHO ManageEngine ServiceDesk Plus Cross-Site Scripting Vulnerability (CNVD-2019-25739)

ZOHO ManageEngine ServiceDesk Plus is a set of ITIL-based IT service management software ITSM from ZOHO. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management and other functional modules. A cross-site scripti...

Zoho ManageEngine ServiceDesk Plus Cross-Site Scripting Vulnerability (CNVD-2019-15667)

ZOHO ManageEngine ServiceDesk Plus is a set of ITIL-based IT service management software ITSM from ZOHO. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management and other functional modules. A cross-site scripti...

PostgreSQL COPY FROM PROGRAM Command Execution Exploit

Installations running Postgres 9.3 and above have functionality which allows for the superuser and users with 'pgexecuteserverprogram' to pipe to and from an external program using COPY. This allows arbitrary command execution as though you have console access. This module attempts to create a ne...

Foxit Reader U3D Parsing Out-of-Bounds Read Vulnerability (CNVD-2018-25215)

Foxit Reader is China's Foxit Foxit Software Corporation of a PDF document reader. u3d plugin is one of the general 3D graphics format standard plug-ins. Foxit Reader 9.3.0.10826 version of the FoxitReader.exe file of the u3d plugin version 9.3.0.10809 security vulnerabilities. A remote attacker...