12356 matches found
Automatic Question Paper Generator System SQL注入漏洞
Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which is caused by unknown code in admin/courses/viewclass.p...
Jenkins Plugins remote-jobs-view-plugin 代码问题漏洞
Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins Plugins remote-jobs-view-plugin 0.0.3 and earlier versions that stems from not...
PT-2023-21891 · Jenkins · Jenkins Pipeline Aggregator View Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline Aggregator View Plugin versions 1.13 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because a variable representing the current view's URL is not properly escaped i...
Jenkins Plugins Pipeline Aggregator View 跨站脚本漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
PT-2023-17101 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System
Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical vulnerability was found in the SourceCodester Automatic Question Paper Generator System. This issue affects the file admin/courses/view class.php of...
PT-2023-21903 · Jenkins · Jenkins Remote-Jobs-View-Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins remote-jobs-view-plugin Plugin versions 0.0.3 and earlier Description: The issue is related to the XML parser not being configured to prevent XML external entity XXE attacks. This allows authenticated attackers with Overall/Read...
SourceCodester Monitoring of Students Cyber Accounts System 跨站脚本漏洞
Monitoring of Students Cyber Accounts System is a Monitoring of Students Cyber Accounts System by Chris Jim Egot Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Monitoring of Students Cyber Accounts System version 1.0, which stems from an issue with the file...
SourceCodester Automatic Question Paper Generator System SQL注入漏洞
Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which originates from a SQL injection vulnerability found in...
SourceCodester Medicine Tracker System SQL注入漏洞
Medicine Tracker System is a medicine tracker system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Medicine Tracker System version 1.0, which stems from a SQL injection vulnerability found in the parameter id in medicines/viewdetails.php...
PT-2023-16985 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System
Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical issue has been found in the GET Parameter Handler component of the file admin/courses/view course.php. The manipulation of the id argument leads to s...
Student Study Center Desk Management System SQL注入漏洞
Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates from a security issue in the function viewstudent in...
PT-2023-17004 · Sourcecodester · Sourcecodester Student Study Center Desk Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A critical issue affects the function view student of the file "admin/?page=students/view student". The manipulation of the argument id with a specific input...
Atlassian Jira 8.6.0 < 8.8.1 Xss In Xml Export View
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.16, 8.0.0 prior to 8.5.5 or 8.6.0 prior to 8.8.1. It is, therefore, affected by a vulnerability which permits remote attackers to inject arbitrary HTML or JavaScript via ...
Atlassian Jira 8.0.0 < 8.5.5 Xss In Xml Export View
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.16, 8.0.0 prior to 8.5.5 or 8.6.0 prior to 8.8.1. It is, therefore, affected by a vulnerability which permits remote attackers to inject arbitrary HTML or JavaScript via ...
Debian DSA-5372-1 : rails - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5372 advisory. Multiple vulnerabilities were discovered in rails, the Ruby based server-side MVC web application framework, which could result in XSS, data disclosure and open...
CVE-2023-0349
The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to view and record image and video from the camera...
CVE-2023-0349 CVE-2023-0349
The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to view and record image and video from the camera...
The vulnerability of the Power Monitoring Expert software allows a intruder to view and modify the equipment settings.
The vulnerability of the Power Monitoring Exper software-related software is related to insufficient verification of input data. Exploiting this vulnerability allows a remote attacker to view and modify the settings of the equipment...
Cross-site Scripting (XSS)
vega is vulnerable to Cross-site Scripting XSS attacks. The library does not properly enforce types for its arguments in the lassoAppend function, which allows an attacker to specify any object with a push function. The push function then can be set to any function that has the access to event.vi...
