CVE-2023-45674 SQL injection vulnerability in Farmbot-Web-App

Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database including the user table. This issue may lead to Information Disclosur...

CVE-2023-45674 SQL injection vulnerability in Farmbot-Web-App

Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database including the user table. This issue may lead to Information Disclosur...

CVE-2023-45674

Farmbot-Web-App (Farmbot Web UI) has an SQL injection flaw in versions prior to 15.8.4 that allows authenticated attackers to extract arbitrary data from the database (including the user table), leading to information disclosure. The issue is mitigated by upgrading to version 15.8.4 or later; no ...

PT-2023-29642 · Unknown · Farmbot-Web-App

Name of the Vulnerable Software and Affected Versions: Farmbot-Web-App versions prior to 15.8.4 Description: The Farmbot-Web-App, a web control interface for the Farmbot farm automation platform, contains an SQL injection vulnerability. This issue allows authenticated attackers to extract arbitra...

CVE-2023-42808 Common Voice Cross-site Scripting vulnerability

Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that user-controlled data flows to a path...

CVE-2023-42808

CVE-2023-42808 affects Mozilla Common Voice, Version 1.88.2, with a reflected XSS vulnerability. The issue arises because user-controlled data reaches a path expression in a server-side request, enabling reflected XSS in the server origin context. The provided documents do not confirm a patch or ...

CVE-2023-42808 Common Voice Cross-site Scripting vulnerability

Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that user-controlled data flows to a path...

CVE-2023-43804 vulnerabilities

Vulnerabilities for packages: kube-downscaler, k8s-sidecar, kubeflow-volumes-web-app, py3.13-scanner-test-libraries, kubeflow-jupyter-web-app, dask-gateway, py3-urllib3...

GHSA-V845-JXX5-VC9F vulnerabilities

Vulnerabilities for packages: kube-downscaler, k8s-sidecar, kubeflow-volumes-web-app, py3.13-scanner-test-libraries, kubeflow-jupyter-web-app, dask-gateway, py3-urllib3...

GHSA-X7M3-JPRG-WC5G vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-jupyter-web-app...

GHSA-X7M3-JPRG-WC5G vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, kubeflow-volumes-web-app...

CVE-2023-41419 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-jupyter-web-app...

CVE-2023-41419 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, kubeflow-volumes-web-app...

Medium: tomcat

Issue Overview: A flaw was found in the Apache Tomcat package. An example web application did not filter the form authentication example, exposing a Cross-site scripting XSS vulnerability. CVE-2022-34305 Affected Packages: tomcat Note: This advisory is applicable to Amazon Linux 2 - Tomcat8.5...

Medium: tomcat

Issue Overview: URL Redirection to Untrusted Site 'Open Redirect' vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. The...

dst-admin Code Injection Vulnerability

dst-admin is a web program written in Java by qinming99, an individual developer. A security vulnerability exists in dst-admin v1.5.0, which is caused by a Remote Command Execution RCE vulnerability in the parameter userId of the component /home/playerOperate...

OESA-2023-1632 tomcat security update

The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open developmen...

CVE-2023-42362

An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file...

CVE-2023-42362

An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file...

CVE-2023-42362

An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file...