IBM WebSphere Application Server Path Traversal Vulnerability (CNVD-2020-59728)

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A path traversal vulnerability exists in IBM WebSphere Application...

SAP NetWeaver Enterprise Portal Cross-Site Scripting Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver Enterprise Portal Fiori Framework Page versions 7.5...

HPE Intelligent Management Center (iMC) eventinfo_content Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

HPE Intelligent Management Center (iMC) ictexpertcsvdownload Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

HPE Intelligent Management Center (iMC) operationSelect Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

HPE Intelligent Management Center (iMC) faultinfo_content expression language injection remote code execution vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

HPE Intelligent Management Center (iMC) deployselectbootrom Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

AVM Fritz!Box Security Bypass Vulnerability

The AVM Fritz!Box is a wireless router from the German company AVM. A security vulnerability exists in FRITZ!Box version 7.20 and prior versions, which stems from suffering a DNS rebinding protection bypass vulnerability. No detailed vulnerability details are currently available...

HPE Intelligent Management Center (iMC) navigationTo Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

HPE Intelligent Management Center (iMC) chooseperfview Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

GitLab Authorization Issues Vulnerability (CNVD-2020-63398)

GitLab is a Ruby on Rails developed, self-hosted, Git version control system project repository application from GitLab, Inc. The program can be used to access the project's file contents, commit history, bug list , etc. Git is a free, open source distributed version control system. A security...

IBM WebSphere Application Server Information Disclosure Vulnerability (CNVD-2020-58777)

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A security vulnerability exists in IBM WebSphere Application Server...

CVE-2019-4545

IBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be susceptible to spoofing attacks. IBM X-Force ID: 165877...

SpamTitan Code Injection Vulnerability

SpamTitan is an anti-spam solution from C/o Copperfasten, Ireland. The solution is characterized by easy installation and simple configuration. A code injection vulnerability exists in SpamTitan 7.07. The vulnerability stems from improper validation of the quid parameter in mailqueue.php. The...

Trustwave MailMarshal Operating System Command Injection Vulnerability

Trustwave MailMarshal is a suite of email security gateway products from Trustwave, Inc. An operating system command injection vulnerability exists in the STARTTLS implementation in Trustwave MailMarshal versions prior to 7.2. An attacker could exploit this vulnerability to execute arbitrary...

PT-2020-15384

Name of the Vulnerable Software and Affected Versions Gazie version 7.29 Description The issue allows for Cross Site Scripting XSS via the "http://192.168.100.7/gazie/modules/config/admin utente.php" endpoint, specifically through the user name variable. An attacker can inject JavaScript code,...

iCMS Cross-Site Request Forgery Vulnerability (CNVD-2020-54957)

iCMS is a content management system CMS built with PHP and MySQL databases. A cross-site request forgery vulnerability exists in iCMS v7.0.0. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker can exploit the...

CVE-2020-24739

A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account. When missing the CSRFTOKEN and can still request normally, all administrators except the initial administrator will be deleted...

openSIS SQL Injection Vulnerability (CNVD-2020-50952)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the login function in OS4Ed openSIS 7.3, which can be exploited by an attacker to conduct a SQL injection attack by sending a specially crafted HTTP request...

openSIS SQL Injection Vulnerability (CNVD-2020-50532)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the ln parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...