NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, an...
dotCMS versionsĀ 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint uses the sites query parameter, which accepts a comma-separated list of site identifiers or keys.
The vulnerability was triggered via the sites parameter, which...
Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle.Ā Testing completed onĀ Tesla Model 3 vehicles with software version v11.1 (2023.20.9 ee6de92ddac5).Ā T...
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI th...
AFFECTED_PRODUCTS:
IBM Sterling B2b Integrator,
IBM Sterling B2b Integrator,
IBM Sterling File Gateway
... (+1)
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 could disclose sensitive system information about the server to a privileged user that could aid in further attacks against the system...
AFFECTED_PRODUCTS:
IBM Sterling B2b Integrator,
IBM Sterling B2b Integrator,
IBM Sterling File Gateway
... (+1)
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory.
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potenti...
An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel.
AFFECTED_PRODUCTS:
Phpversion Vx Guestbook
It was possible to perform Remote Command Execution (RCE) via Java
RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and
execute OS commands under the delegated authority of the AdminServer process.Ā An RMI interface permitted manipulation of a configuration
property...
Input from search query parameter in GOV CMS is not sanitized properly, leading to a Blind SQL injection vulnerability, which might be exploited by an unauthenticated remote attacker.
Versions 4.0 and above are not affected.
A vulnerability has been discovered in version 4.0.5 of appRain CMF, consisting of an authenticated reflected XSS due to a lack of proper validation of user input, through theĀ 's' parameter in /apprain/developer/debug-log/db.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in version 4.0.5 of appRain CMF, consisting of an authenticated reflected XSS due to a lack of proper validation of user input, through theĀ 'page' parameter in /apprain/developer/addons.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/uploadify.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/tree.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/tablesorter.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/row_manager.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/rich_text_editor.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/hysontable.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/dialogs.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/cycle.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/commonresource.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/canvasjs.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/bootstrap.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/base_libs.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/appform.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/admin.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/ace.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters inĀ /apprain/developer/addons/update/960grid.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[sconfig][ethical_licensekey]' parameter in /apprain/admin/config/ethical.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Page][name]' parameter in /apprain/page/manage-static-pages/create.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[AppReportCode][id]' and 'data[AppReportCode][name]' parameters in /apprain/appreport/manage/.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Option][message]', 'data[Option][subject]' and 'data[Option][templatetype]' parameters in /apprain/information/manage/emailte...
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[code]', 'data[lang][0][key]', 'data[lang][0][value]', 'data[lang][1][key]' and 'data[title]' parameters inĀ /apprain/developer...
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[code]', 'data[lang][0][key]', 'data[lang][0][value]', 'data[lang][1][key]' and 'data[title]' parameters inĀ /apprain/developer...
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[sconfig][admin_landing_page]', 'data[sconfig][currency]', 'data[sconfig][db_version]', 'data[sconfig][default_pagination]', '...
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Group][name]' parameter in /apprain/admin/managegroup/add/.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[FileManager][search]' parameter in /apprain/admin/filemanager.
AFFECTED_PRODUCTS:
Apprain Apprain
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through theĀ 'data[Admin][description]', 'data[Admin][f_name]' and 'data[Admin][l_name]' parameters in /apprain/admin/account/edit.
AFFECTED_PRODUCTS:
Apprain Apprain
A problem has been discovered in appRain CMF 4.0.5. An authenticated Path Traversal vulnerability in /apprain/common/download/ allows remote users to bypass the intended SecurityManager restrictions and download any file if they have adequate permissions outside the document root configured on the s...
AFFECTED_PRODUCTS:
Apprain Apprain
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through theĀ 'data%5BPage%5D%5Bname%5D' parameter in /apprain/page/manage-static-pages/create/.
AFFECTED_PRODUCTS:
Apprain Apprain
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through theĀ 'data%5BPage%5D%5Bname%5D' parameter in /apprain/page/manage-dynamic-pages/create.
AFFECTED_PRODUCTS:
Apprain Apprain
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through theĀ 'data%5BAdmin%5D%5Busername%5D' parameter in /apprain/admin/manage/add/.
AFFECTED_PRODUCTS:
Apprain Apprain
Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store.
Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to access to Proxy information.
A vulnerability has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /submitproperty.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
AFFECTED_PRODUCTS:
Codeastro Real Estate Management System
A flaw has been found in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /register.php. Executing manipulation of the argument uimage can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.
AFFECTED_PRODUCTS:
Codeastro Real Estate Management System
A vulnerability was detected in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /feature.php. Performing manipulation of the argument msg results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used.
AFFECTED_PRODUCTS:
Codeastro Real Estate Management System
A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /propertyview.php. Such manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack remotely. The exploit has bee...
AFFECTED_PRODUCTS:
Codeastro Real Estate Management System
A weakness has been identified in D-Link DI-8400 16.07.26A1. The affected element is the function yyxz_dlink_asp of the file /yyxz.asp. This manipulation of the argument ID causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the...
AFFECTED_PRODUCTS:
Dlink Di 8400 Firmware
A security flaw has been discovered in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalStorageController. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited.