Sangfor Operation and Maintenance Management System: Operating System Command Injection Vulnerability

Sangfor Operation and Maintenance Management System is an operation and maintenance management system developed by Sangfor Corporation in China. Versions of Sangfor Operation and Maintenance Management System 3.0.12 and earlier had a vulnerability related to operating system command injection. Th...

PT-2025-36128

Name of the Vulnerable Software and Affected Versions: Saad Iqbal License Manager for WooCommerce versions through 3.0.12 Description: The software contains an SQL injection flaw that allows for blind SQL injection. This issue is due to improper neutralization of special elements used in an SQL...

@astro-reactive/common (>=0.2.0 <=0.2.1), @bookshop/astro-engine (>=3.7.0 <=3.10.1) +57 more potentially affected by CVE-2024-47885 via astro (>=3.0.12 <=4.15.9)

astro NPM version =3.0.12, =0.2.0, =3.7.0, =0.40.5, =0.34.0, =0.34.0, =0.0.2, =2.0.0, =0.0.0-test-20230907022505, =0.0.1, =0.0.1, =0.0.6, =0.1.4 and more Source cves: CVE-2024-47885 Source advisory: OSV:GHSA-M85W-3H95-HCF9...

SUSE CVE-2012-1098

Cross-site scripting XSS vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through certain methods...