19918 matches found
Command execution vulnerability in songcms backend (CNVD-2021-12674)
SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the backend of songcms. An attacker can...
Command Execution Vulnerability in songcms Backend
SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the backend of songcms. An attacker can...
CVE-2020-24549
openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server...
Code injection
openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server...
Jenkins < 2.263.2 LTS / 2.275 Multiple Vulnerabilities
The version of Jenkins running on the remote web server is prior to 2.275 or is a version of Jenkins LTS prior to 2.263.2. It is, therefore, affected by multiple vulnerabilities, including the following: - Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure...
Code Execution Vulnerability in the Backend of Ecommerce Power Mall System of Shenzhen Yitongding Multimedia Co.
The business scope of Shenzhen ETD Multimedia Co., Ltd. includes: website construction, mobile WeChat mini-program development, mini-program community group-buying system, VI design, network operation, cloud products-operation and maintenance solutions. There is a code execution vulnerability in...
CVE-2020-24549
openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server...
CVE-2021-2062
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Web Server. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
Design/Logic Flaw
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Web Server. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
Unspecified Vulnerability in Oracle BI Publisher (CNVD-2021-04812)
Oracle BI Publisher is a reporting solution that makes it easier and faster than traditional reporting tools to produce, manage and deliver all reports and documents. An unspecified vulnerability exists in the Web Server component in Oracle BI Publisher 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0,...
ImpressCMS: Arbitrary File Deletion via Path Traversal in image-edit.php
Summary: The vulnerability is located in the /libraries/image-editor/image-edit.php script: 161. if @copy ICMSIMANAGERFOLDERPATH . '/temp/' . $simagetemp, $categpath . $simage-getVar 'imagename' 162. if @unlink ICMSIMANAGERFOLDERPATH . '/temp/' . $simagetemp 163. $msg = MDAMDBUPDATED; ... 190. el...
Command Execution Vulnerability in Multiple LB-LINK Routers
BL-X22, BL-X16 and BL-X12 are all wireless routers from Shenzhen Bilian Electronics Co. A command execution vulnerability exists in multiple LB-LINK routers. An attacker can exploit this vulnerability to gain control of a web server...
Oracle Fusion Middleware 安全漏洞
Oracle BI Publisher is a reporting solution that makes it easier and faster than traditional reporting tools to produce, manage and deliver all reports and documents. An unspecified vulnerability exists in the Web Server component in Oracle BI Publisher 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0,...
Simple Job Board < 2.9.4 - Authenticated Path Traversal Leading to Arbitrary File Download
The plugin does not validate the sjbfile parameter when viewing a resume, allowing authenticated user with the downloadresume capability such as HR users to download arbitrary files from the web-server via a path traversal attack PoC The sjbfile parameter to use may depends on the configuration o...
CVE-2021-3131
The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter...
CVE-2021-3131
The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter...
CVE-2021-3131
The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter...
Design/Logic Flaw
The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter...
CVE-2021-3131
The CVE concerns the Web server in 1C:Enterprise 8, prior to version 8.3.17.1851, which transmits credentials in base64 via the creds URL parameter. The issue is confirmed by multiple connected sources, including PT-2021-19235, which specifies affected versions as 1C:Enterprise 8 before 8.3.17.18...