CVE-2021-27234

Mutare Voice (EVM) 3.x before 3.3.8 contains an SQL injection vulnerability in the web application, affecting Adminlog.asp, Archivemsgs.asp, Deletelog.asp, Eventlog.asp, and Evmlog.asp. The issue is caused by unsafe SQL query construction in the vulnerable pages. The connected sources do not prov...

CVE-2021-27234

An issue was discovered in Mutare Voice EVM 3.x before 3.3.8. The web application suffers from SQL injection on Adminlog.asp, Archivemsgs.asp, Deletelog.asp, Eventlog.asp, and Evmlog.asp...

CVE-2021-27235

Mutare Voice (EVM) 3.x before 3.3.8 contains an insecure admin-portal export at diagzip.asp that allows unauthenticated users to export database tables. Root cause is a misconfigured export function without proper access controls, enabling potential data disclosure. Affected product: Mutare Voice...

Secomea SiteManager Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Secomea SiteManager that stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

Sourcecodester Pisay Online E-Learning System SQL注入漏洞

Sourcecodester Pisay Online E-Learning System is an online e-learning system based on PHP and MySQL. Sourcecodester Pisay Online E-Learning System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in a database-based...

Atlassian Jira Server 和 Data Center 跨站脚本漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A cross-site scripting vulnerability exists in Atlassian Jira Server and Data Center, which stems from a lack of proper validati...

CVE-2021-21307

Lucee Server is a dynamic, Java based JSR-223, tag and scripting language used for rapid web application development. In Lucee Admin before versions 5.3.7.47, 5.3.6.68 or 5.3.5.96 there is an unauthenticated remote code exploit. This is fixed in versions 5.3.7.47, 5.3.6.68 or 5.3.5.96. As a...

CVE-2021-21307 Remote Code Exploit in Lucee Admin

Lucee Server is a dynamic, Java based JSR-223, tag and scripting language used for rapid web application development. In Lucee Admin before versions 5.3.7.47, 5.3.6.68 or 5.3.5.96 there is an unauthenticated remote code exploit. This is fixed in versions 5.3.7.47, 5.3.6.68 or 5.3.5.96. As a...

CVE-2021-21307

CVE-2021-21307 : Lucee Admin has an unauthenticated remote code execution vulnerability in Lucee Admin before versions 5.3.7.47, 5.3.6.68 or 5.3.5.96. The issue is fixed in those versions; a workaround is to block access to the Lucee Administrator. Public exploitation templates (e.g., an unordere...

CVE-2020-13185

Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials...

Design/Logic Flaw

Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials...

CVE-2020-13185

Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials...

BIG-IP Advanced WAF and ASM Resource Management Error Vulnerability

F5 BIG-IP ASM is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A resource management error vulnerability exists in BIG-IP Advanced WAF and ASM, which arises from...

BIG-IP 跨站脚本漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in BIG-IP, which stems from the lack of proper validation of client-side data by t...

F5 BIG-IP AFM 跨站脚本漏洞

F5 BIG-IP AFM is an advanced firewall product from F5 USA for protection against DDos attacks. A cross-site scripting vulnerability exists in BIG-IP AFM, which originates from the lack of proper validation of client data by a WEB application. An attacker can exploit this vulnerability to execute...

McAfee McAfee Endpoint Security Cross-Site Scripting Vulnerability

Mcafee McAfee Endpoint Security ENS is a set of U.S. McAfee Mcafee company to provide intelligent collaboration and advanced threat defense framework. The framework supports control of the entire threat defense lifecycle for real-time communications and actionable threat forensics, among other...

PNPSCADA Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in PNPSCADA that stems from a lack of proper validation of client-side data by the WEB application. An attacker could exploit this vulnerability to execute client-side code...

IBM Case Manager 跨站脚本漏洞

IBM Case Manager is a solution for managing cases from IBM USA. The solution supports the combination of content, processes and people, and provides frameworks, relevance methods and integration tools to view a holistic view of cases. A cross-site scripting vulnerability exists in IBM Case Manage...

Kartpay: Host Header Injection

Summary: Hello Team, While performing security testing on your Main Domain, I found a Host Header Injection Vulnerability. Vulnerability Description: An attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multip...

Junedchhipa ApexCharts Cross-Site Scripting Vulnerability

Junedchhipa ApexCharts is an application for individual developers in Junedchhipa, India. It provides the functionality of open source charts. A cross-site scripting vulnerability exists in Apexcharts, which stems from a lack of proper validation of client-side data in the WEB application. An...