CVE-2019-20223

In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...

Support Incident Tracker Cross-Site Scripting Vulnerability (CNVD-2020-04723)

Support Incident Tracker SiT! is a PHP and MySQL based technical support phone/email tracking system. A cross-site scripting vulnerability exists in the 'id' parameter in version 3.67 of SiT! The vulnerability stems from the lack of proper validation of client-side data by the WEB application,...

McAfee Threat Intelligence Exchange Server Authorization Issues Vulnerability

McAfee TIE Server is a network threat defense server from the U.S. company McAfee McAfee. An authorization issue vulnerability exists in the API in McAfee Threat Intelligence Exchange Server version 3.0.0. The vulnerability stems from a lack of authentication measures or insufficient authenticati...

NeuVector Authentication Vulnerability

NeuVector is an end-to-end container security platform from US-based NeuVector. The platform includes features such as image vulnerability management, access control and container process/filesystem protection. A security vulnerability exists in NeuVector version 3.1. The vulnerability can be...

IBM Financial Transaction Manager for SWIFT Services Clickjacking Vulnerability

IBM Financial Transaction Manager for SWIFT Services is a financial transaction manager product from IBM in the United States. The product is primarily used for monitoring, tracking and reporting financial payments and transactions. A clickjacking vulnerability exists in IBM Financial Transaction...

CVE-2019-16558

Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM...

PT-2019-14480 · Intesync · Intesync Solismed

Name of the Vulnerable Software and Affected Versions: Intesync Solismed version 3.3sp Description: The issue is related to cross-site scripting XSS. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized...

YARA has unspecified vulnerabilities

YARA is a set of tools used to help software researchers identify and categorize malware samples. A security vulnerability exists in the machoparsefile function of the macho/macho.c file in YARA version 3.11.0. The vulnerability can be exploited by an attacker to cause out-of-bounds memory access...

Unspecified Vulnerability in TemaTres

TemaTres is an open source vocabulary server. A security vulnerability exists in TemaTres version 3.0, which can be exploited by remote attackers to create administrator accounts...

TemaTres Cross-Site Scripting Vulnerability

TemaTres is an open source vocabulary server. A cross-site scripting vulnerability exists in TemaTres version 3.0, which can be exploited by an attacker to execute client-side code...

CVE-2019-14345

TemaTres 3.0 allows remote unprivileged users to create an administrator account...

PT-2019-15720 · Cyrus +5 · Cyrus Imap +5

Name of the Vulnerable Software and Affected Versions: Cyrus IMAP versions 2.5.x through 2.5.13 Cyrus IMAP versions 3.x through 3.0.11 Description: The issue allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous request that...

S-CMS enterprise website building system v3.0 backend has SQL injection vulnerability (CNVD-2019-45336)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS v3.0 background SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

CVE-2019-5644

Computing For Good's Basic Laboratory Information System also known as C4G BLIS version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may alter several facets of a user account, including promoting any user to an administrator...

SQL Injection Vulnerability in XYHCMS 3.6

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system, simple and easy to use. XYHCMS 3.6 SQL injection vulnerability , an attacker can exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Seven Bears Library System v3.4

Seven bears is similar to Baidu library, can realize the document sharing, selling library CMS system. After the user uploads the source document, seven bears will automatically transcode the document into HTML, after the success of the document HTML back to the library CMS. to realize...

CVE-2019-9596

Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint...

CVE-2019-13657

CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security...

UBUNTU-CVE-2018-14880

The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6printlshdr...

S-CMS php version enterprise website builder system v3.0 backend aj***.php C**_1y*** parameter SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS php version of the enterprise website building system v3.0 background aj.php C1y parameter there is a SQL injection...