CVE-2022-22108

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account employee type user, can view the absences of all users in the system including administrators. This type of user is not authorized to view this kind of...

CVE-2022-22107

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account employee type user, can view the appointments of all users in the system including administrators. However, this type of user is not authorized to view the...

Authorization

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account employee type user, can view the appointments of all users in the system including administrators. However, this type of user is not authorized to view the...

The vulnerability of the WebView component for displaying web pages in Google Chrome browser and on the Android operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WebView component of Google Chrome’s browser involves errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2021-43856

Wiki.js is a wiki app built on Node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through non-image file uploads for file types that can be viewed directly inline in the browser. By creating a malicious file which can execute inline JS when viewed in the browser e.g...

Cross site scripting

Wiki.js is a wiki app built on Node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through non-image file uploads for file types that can be viewed directly inline in the browser. By creating a malicious file which can execute inline JS when viewed in the browser e.g...

Cross-site Scripting (XSS)

epiphany is vulnerable to cross-site scripting. The vulnerability exists when View Source mode or Reader mode is used, as demonstrated by a a page title...

CVE-2021-45253

The id parameter in viewstorage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted...

CVE-2021-45253

The id parameter in viewstorage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted...

Zoho ManageEngine Access Manager Plus 授权问题漏洞

ZOHO Zoho ManageEngine Access Manager Plus is a privileged session management solution from ZOHO for enterprises to centralize, secure, and manage remote access to privileged sessions.A security vulnerability exists in versions of Zoho ManageEngine Access Manager Plus prior to 4203. The...

Bentley View Information Disclosure Vulnerability (CNVD-2021-102044)

Bentley View is a free viewer from Bentley Systems, U.S.A. A security vulnerability exists in Bentley View. An attacker could exploit this vulnerability to obtain sensitive information...

Bentley View Code Execution Vulnerability (CNVD-2021-102046)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102047)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102050)

Bentley View is a free viewer from Bentley Systems, USA. A security vulnerability exists in Bentley View due to an out-of-bounds write when parsing a JT file. An attacker can exploit this vulnerability to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102045)

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View has a security vulnerability that could be exploited by attackers to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102055)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102057)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by an out-of-bounds write when parsing DGN files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102054)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102049)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102056)

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View has a security vulnerability that could be exploited by attackers to execute arbitrary code on the system...