PT-2024-34496 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Cab Management System version 1.0 Description: A SQL injection issue in manage client.php and view cab.php allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and...

izone 安全漏洞

izone is a Django-based blogging project by the individual developer of Hopetree. A security vulnerability exists in izone, which stems from the AddCommintView function in appscommentviews.py contains a cross-site scripting XSS vulnerability...

Sourcecodester Cab Management System 安全漏洞

Sourcecodester Cab Management System is an open source cab management system from Sourcecodester. A security vulnerability exists in Sourcecodester Cab Management System version 1.0, which originates from an SQL injection vulnerability contained in the id parameter in manageclient.php and...

WordPress RSV 360 View Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software RSV 360 View Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51906 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 10130673798c Credits SOPROBRO Required privilege Contributor...

PT-2024-10738 · Alecto · Alecto Ivm-100

Name of the Vulnerable Software and Affected Versions: Alecto IVM-100 version 2019-11-12 Description: An issue was discovered where a large amount of information is disclosed when attaching to the serial interface at the board level and rebooting the device. This includes the view password and th...

PT-2024-16683 · Sourcecodester · Sourcecodester Online Veterinary Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Veterinary Appointment System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online Veterinary Appointment System. This issue affects the file /admin/services/view service.php, where th...

CVE-2024-10732

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /module/wordmodel/view/index.php. The manipulation of the argument querystr leads to sql injection. The attack can be launched remotely...

PT-2024-16495 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 up to 11.10 Description: A critical issue has been found in Tongda OA, affecting an unknown functionality of the file /module/word model/view/index.php. The manipulation of the query str argument leads to SQL injection. The...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system of China Tongda TONGDA. TONGDA Office Anywhere has a SQL injection vulnerability, which originates from the querystr parameter of the /module/wordmodel/view/index.php page containing a SQL injection vulnerability...

Qualitor 安全漏洞

Qualitor is a managed service process and centralized service platform from Qualitor, Inc. A security vulnerability exists in Qualitor version v8.24, which originates from the component /request/viewValidacao.php and is vulnerable to server-side request forgery attacks...

The vulnerability in the web interface for managing microprogramming software in Cisco Analog Telephone Adapter (ATA) Series 190 devices allows a perpetrator to view or delete configurations or modify firmware.

The vulnerability of the web interface for managing microprogramming software in Cisco Analog Telephone Adapter ATA devices of the 190 series is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to view or delete configurations, or modify firmware using...

CyberPanel 安全漏洞

CyberPanel is a web hosting control panel with built-in DNS and email servers by Usman Nasir, an individual developer. CyberPanel has a security vulnerability that originates from upgrademysqlstatus in databases/views.py that allows remote attackers to bypass authentication and execute arbitrary...

CVE-2024-44262

This issue was addressed with improved redaction of sensitive information. This issue is fixed in visionOS 2.1. A user may be able to view sensitive user information...

CVE-2024-44261

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1. An attacker may be able to view restricted content from the lock screen...

PT-2024-31063 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.1 iPadOS versions prior to 18.1 Description: The issue allows an attacker to view restricted content from the lock screen. This was addressed with improved checks. Recommendations: For iOS versions prior to 18.1, upda...

PT-2024-34362 · Unknown · Ironman Powershell Universal

Name of the Vulnerable Software and Affected Versions: Ironman PowerShell Universal versions prior to 5.0.12 Description: The issue allows an authenticated attacker to elevate their privileges and view job information. Recommendations: For versions prior to 5.0.12, update to version 5.0.12 or lat...

Ironman PowerShell Universal 安全漏洞

Ironman PowerShell Universal is a single pane for managing and delegating access to automation environments from Ironman. A security vulnerability exists in Ironman PowerShell Universal version 5.x prior to 5.0.12, which originates from a vulnerability that allows an authenticated attacker to...

Malicious code in axum-live-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13a5a0a62bce34fe9622dd50cb22861f95c0e64bc3ac81d819fd4191380ce5e6 The OpenSSF Package Analysis project identified 'axum-live-view' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10235 Malicious code in axum-live-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13a5a0a62bce34fe9622dd50cb22861f95c0e64bc3ac81d819fd4191380ce5e6 The OpenSSF Package Analysis project identified 'axum-live-view' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-10338

A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/home.php. The manipulation of the argument view/view1 leads to sql injection. The attack can be launched remotely. Th...