SAP Business Planning and Consolidation 代码问题漏洞

SAP Business Planning and Consolidation is a business planning and consolidation software from SAP, Germany. The software provides budgeting, forecasting, and financial consolidation capabilities. A code issue vulnerability exists in SAP Business Planning and Consolidation version 200, version 30...

CVE-2023-24646

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

JTEKT ELECTRONICS Screen Creator Advance 缓冲区错误漏洞

JTEKT ELECTRONICS Screen Creator Advance is a screen development tool from JTEKT ELECTRONICS. A security vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and prior versions, which stems from an inability to validate data when processing file structure information...

JTEKT ELECTRONICS Screen Creator Advance 资源管理错误漏洞

JTEKT ELECTRONICS Screen Creator Advance is a screen development tool from JTEKT ELECTRONICS. A security vulnerability exists in JTEKT ELECTRONICS Screen Creator Advance 2 Ver.0.1.1.4 Build01 and prior versions, which stems from a lack of error handling process even if an error is detected...

CVE-2023-24188

ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted...

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Online Food Ordering System version v2.0, which originates from an SQL injection vulnerability...

Baicells Nova 命令注入漏洞

The Baicells Nova 436Q is an advanced dual-carrier outdoor eNodeB eNB from Baicells USA. A security vulnerability exists in the Baicells Nova 436Q, Nova 430E, Nova 430I, Neutrino 430 LTE TDD eNodeB devices QRTB version 2.12.7 and prior versions. An attacker can exploit the vulnerability to remote...

OESA-2023-1080 golang security update

The Go Programming Language Security Fixes: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very...

OESA-2023-1082 golang security update

The Go Programming Language Security Fixes: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very...

mojoPortal 代码问题漏洞

mojoPortal is the United States Joe Audette individual developer of a set of open source , object-oriented Web site architecture WSF and content management system CMS. The system provides event calendars, photo albums, file managers, and more. A security vulnerability exists in mojoPortal version...

varnish: Request Forgery Vulnerability

An HTTP Request Forgery issue was discovered in Varnish Cache. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could be used to exploit...

VulnCheck KEV: CVE-2023-0718

The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajaxsavefolder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke...

CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

CVE-2023-24197

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...

PT-2023-19471 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "view order.php" endpoint. Recommendations: For Online Food Ordering...

CVE-2022-48085

Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...

PT-2023-19469 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is present in the page parameter in the navbar.php file. Cross-site scripting XSS is a type of security...

Another Eden 安全漏洞

WFS Another Eden 另一个伊甸 is a 2017 free-to-play mobile RPG game by WFS Japan. A security vulnerability exists in Another Eden versions prior to v3.0.20 and prior to v2.14.200, which stems from the components wfshbr64.sys and wfshbr32.sys that allow an attacker to perform elevation of privilege via ...

CVE-2023-24197

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...