Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server.This issue affects Apache DolphinScheduler: until 3.1.9.
Users are recommended to upgrade to version 3.1.9, which fixes the issue.
AFFECTED_PRODUCTS:
Apache Dolphinscheduler
A vulnerability classified as critical was found in Campcodes Online College Library System 1.0. This vulnerability affects unknown code of the file /admin/book_add.php of the component HTTP POST Request Handler. The manipulation of the argument category leads to sql injection. The attack can be ini...
AFFECTED_PRODUCTS:
Online College Library System Project Online College Library System
A vulnerability classified as critical has been found in Campcodes Online College Library System 1.0. This affects an unknown part of the file /admin/return_add.php of the component HTTP POST Request Handler. The manipulation of the argument student leads to sql injection. It is possible to initiate...
AFFECTED_PRODUCTS:
Online College Library System Project Online College Library System
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule.
AFFECTED_PRODUCTS:
Totolink X2000r Firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup.
AFFECTED_PRODUCTS:
Totolink X2000r Firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.
AFFECTED_PRODUCTS:
Totolink X2000r Firmware
Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do.
AFFECTED_PRODUCTS:
Mingsoft Mcms
layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content parameter.
AFFECTED_PRODUCTS:
Layui Layui
A vulnerability was found in Campcodes Online College Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/borrow_add.php of the component HTTP POST Request Handler. The manipulation of the argument student leads to sql injection....
AFFECTED_PRODUCTS:
Campcodes Online College Library System
A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible to initiate the attack remotely. The expl...
AFFECTED_PRODUCTS:
Phpgurukul Hospital Management System
A vulnerability was found in MdAlAmin-aol Own Health Record 0.1-alpha/0.2-alpha/0.3-alpha/0.3.1-alpha. It has been rated as problematic. This issue affects some unknown processing of the file includes/logout.php. The manipulation leads to cross-site request forgery. The attack may be initiated remot...
AFFECTED_PRODUCTS:
Petrk94 Ownhealthrecord
A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been di...
AFFECTED_PRODUCTS:
Phpgurukul Hospital Management System
LogoBee 0.2 allows updates.php?id= XSS.
AFFECTED_PRODUCTS:
Logobee Logobee
Unified Remote 3.13.0 allows remote attackers to execute arbitrary Lua code because of a wildcarded Access-Control-Allow-Origin for the Remote upload endpoint.
AFFECTED_PRODUCTS:
Unifiedremote Unified Remote
SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component.
AFFECTED_PRODUCTS:
Jeecg Jeecg Boot
An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in __scone_dispatch and other entry functions allows a local attacker to access unauthorized information, aka an "AEPIC Leak."
AFFECTED_PRODUCTS:
Scontain Scone
An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform before 3.29 for Intel SGX. Insufficient pointer validation allows a local attacker to access unauthorized information. This relates to strlen and sgx_is_within_user.
AFFECTED_PRODUCTS:
Fortanix Confidential Computing Manager
An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform before 3.32 for Intel SGX. Lack of pointer-alignment validation logic in entry functions allows a local attacker to access unauthorized information. This relates to the enclave_ecall function and system call...
AFFECTED_PRODUCTS:
Fortanix Confidential Computing Manager
Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel a...
AFFECTED_PRODUCTS:
Scontain Scone
A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information.
AFFECTED_PRODUCTS:
Scontain Scone
SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check.
AFFECTED_PRODUCTS:
Jeecg Jeecg Boot
SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component.
AFFECTED_PRODUCTS:
Jeecg Jeecg Boot
An issue was discovered in XiangShan v2.1, allows local attackers to obtain sensitive information via the L1D cache.
AFFECTED_PRODUCTS:
Openxiangshan Xiangshan
The Kantega SAML SSO OIDC Kerberos Single Sign-on apps before 6.20.0 for Atlassian products allow XSS if SAML POST Binding is enabled. This affects 4.4.2 through 4.14.8 before 4.14.9, 5.0.0 through 5.11.4 before 5.11.5, and 6.0.0 through 6.19.0 before 6.20.0. The full product names are Kantega SAML...
AFFECTED_PRODUCTS:
Kantega-Sso Kantega Saml Sso Oidc Kerberos Single Sign On,
Kantega-Sso Kantega Saml Sso Oidc Kerberos Single Sign On,
Kantega-Sso Kantega Saml Sso Oidc Kerberos Single Sign On
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_department via id or name.
AFFECTED_PRODUCTS:
Customer Support System Project Customer Support System
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject.
AFFECTED_PRODUCTS:
Oretnom23 Customer Support System
WireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site scripting (SXSS) through the recording feature. An attacker can host a malicious payload and perform a test mapping pointing to the attacker's file, and the result will render on the Matched page in the Body area,...
AFFECTED_PRODUCTS:
Wiremock Wiremock
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed.
AFFECTED_PRODUCTS:
Small Crm Project Small Crm
A vulnerability was found in Novel-Plus up to 4.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file novel-admin/src/main/java/com/java2nb/novel/controller/FriendLinkController.java of the component Friendly Link Handler. The manipulation l...
AFFECTED_PRODUCTS:
Xxyopen Novel Plus
Misskey is an open source, decentralized social media platform. Third-party applications may be able to access some endpoints or Websocket APIs that are incorrectly specified as [kind](https://github.com/misskey-dev/misskey/blob/406b4bdbe79b5b0b68fcdcb3c4b6e419460a0258/packages/backend/src/server/ap...
AFFECTED_PRODUCTS:
Misskey Misskey
The [`tj-actions/verify-changed-files`](https://github.com/tj-actions/verify-changed-files) action allows for command injection in changed filenames, allowing an attacker to execute arbitrary code and potentially leak secrets. The [`verify-changed-files`](https://github.com/tj-actions/verify-changed...
AFFECTED_PRODUCTS:
Tj-Actions Verify Changed Files
Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for working with genomic data. Hail relies on OpenID Connect (OIDC) email addresses from ID tokens to verify the validity of a user's domain, but because users have the ability to change t...
AFFECTED_PRODUCTS:
Hail Hail
Visual Studio Code Python Extension Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Python
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress.This issue affects eCommerce Product Catalog Plugin for WordPress: from n/a through 3.3.26.
AFFECTED_PRODUCTS:
Implecode Ecommerce Product Catalog
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode Product Catalog Simple.This issue affects Product Catalog Simple: from n/a through 1.7.6.
AFFECTED_PRODUCTS:
Implecode Product Catalog Simple
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.2.
AFFECTED_PRODUCTS:
Aipower Aipower
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CodePeople Calculated Fields Form.This issue affects Calculated Fields Form: from n/a through 1.2.28.
AFFECTED_PRODUCTS:
Codepeople Calculated Fields Form
An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.
AFFECTED_PRODUCTS:
Jline Jline
easy-rules-mvel v4.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component MVELRule.
AFFECTED_PRODUCTS:
Jeasy Easy Rules
An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occurs only for cases in which the developer supplies invalid arguments. The product is not intended to always halt for contrived inputs.
AFFECTED_PRODUCTS:
Seancfoley Ipaddress
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GM Information Technologies MDO allows SQL Injection.This issue affects MDO: through 20231229.Â
NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
AFFECTED_PRODUCTS:
Gmbilisim Multi Disciplinary Design Optimization
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yaztek Software Technologies and Computer Systems E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: through 20231229.Â
NOTE: The vendor was contacted early about this...
AFFECTED_PRODUCTS:
Yaztekteknoloji E Commerce
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ween Software Admin Panel allows SQL Injection.This issue affects Admin Panel: through 20231229.Â
NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
AFFECTED_PRODUCTS:
Ween Management Panel
Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes are defined for this purpose.
Links can be activated by clicks, or by automatic document events.
The execution of such links must be subject to user approval.
In the affected vers...
AFFECTED_PRODUCTS:
Apache Openoffice
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More: from n/a through 6.9.18.
AFFECTED_PRODUCTS:
Vasyltech Advanced Access Manager
Unrestricted Upload of File with Dangerous Type vulnerability in IOSS WP MLM SOFTWARE PLUGIN.This issue affects WP MLM SOFTWARE PLUGIN: from n/a through 4.0.
AFFECTED_PRODUCTS:
Wpmlmsoftware Wp Mlm Unilevel
Unrestricted Upload of File with Dangerous Type vulnerability in Pixelemu TerraClassifieds – Simple Classifieds Plugin.This issue affects TerraClassifieds – Simple Classifieds Plugin: from n/a through 2.0.3.
AFFECTED_PRODUCTS:
Pixelemu Terraclassifieds
Unrestricted Upload of File with Dangerous Type vulnerability in Jacques Malgrange Rencontre – Dating Site.This issue affects Rencontre – Dating Site: from n/a through 3.10.1.
AFFECTED_PRODUCTS:
Boiteasite Download Rencontre Dating Site
Unrestricted Upload of File with Dangerous Type vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishing and E-Commerce: from n/a through 4.5.2.
AFFECTED_PRODUCTS:
Soft8Soft Verge3d
Unrestricted Upload of File with Dangerous Type vulnerability in Bertha.Ai BERTHA AI. Your AI co-pilot for WordPress and Chrome.This issue affects BERTHA AI. Your AI co-pilot for WordPress and Chrome: from n/a through 1.11.10.7.
AFFECTED_PRODUCTS:
Bertha Bertha Ai