Archive
28 May 2024
Vulnerabilities first published on this day (UTC), newest first.
48 results · Clear filters · Feed
-
Medium 6.3
Nautobot dynamic-group-members doesn't enforce permission restrictions on member objects
Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records (`extras.view_dynamicgroup` permission) can use the Dynamic Group detail UI view (`/extras/dynamic-groups/<uuid>/`) and/or the members…
-
Medium 6.5
An issue discovered in 360 V6G, 360 T5G, 360 T6M, and 360 P1 routers allows attackers to hijack TCP sessions which coul…
-
Medium 6.5
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs). This could allow an attacker with access to the database to recover some or all encrypted values.
-
Medium 5.9
SimpleSAMLphp Information Disclosure vulnerability
### Background SimpleSAMLphp 1.17 includes a preview of the new user interface to be included in the future version 2.0. This new user interface can be enabled by setting the usenewui configuration option to true, and it includes a new admin interface in a mo…
-
Medium 6.5
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values.
-
Medium 6.1
SimpleSAMLphp Reflected Cross-site Scripting vulnerability
### Background SimpleSAMLphp uses metadata to determine how to interact with other SAML entities. This metadata includes what’s called endpoints, which are URLs belonging to that entity where SAML messages can be sent. These URLs are used directly by SimpleSA…
-
Medium 4.7CVE-2024-35511 Public exploit
phpgurukul Men Salon Management System v2.0 is vulnerable to SQL Injection via the "username" parameter of /msms/admin/…
-
Medium 5.4
A SQL injection vulnerability in Mybatis plus versions below 3.5.6 allows remote attackers to obtain database informati…
-
Medium 5.4
Stored Cross-site Scripting on Print Functionality in Umbraco Commerce
Umbraco Commerce is an open source dotnet ecommerce solution. In affected versions there exists a stored Cross-site scripting (XSS) issue which would enable attackers to inject malicious code into Print Functionality. This issue has been addressed in versions…
-
Medium 4.3
An issue discovered in Mercury x30g, Mercury YR1800XG routers allows attackers to hijack TCP sessions which could lead …
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to exec…
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to exec…
-
Medium 5.7
An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial o…
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to exec…
-
Medium 6.5
An issue discovered in Ruijie EG210G-P, Ruijie EG105G-V2, Ruijie NBR, and Ruijie EG105G routers allows attackers to hij…
-
Medium 6.3
An issue was discovered in Apiris Kafeo 6.4.4. It permits a bypass, of the protection in place, to access to the data s…
-
Medium 5.3
An issue discovered in TP-LINK TL-R473GP-AC, TP-LINK XDR6020, TP-LINK TL-R479GP-AC, TP-LINK TL-R4239G, TP-LINK TL-WAR12…
-
Medium 5.3
Information disclosure in minio
MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. `If-Modified-Since` and `If-Unmodified-Since` headers when used with anonymous requests by sending a random object name requests can be used to determine if an o…
-
Medium 6.9
Weak Encoding for Password vulnerability in Campbell Scientific CSI Web Server and RTMC
The Campbell Scientific CSI Web Server stores web authentication credentials in a file with a specific file name. Passwords within that file are stored in a weakly encoded format. There is no known way to remotely access the file unless it has been manually r…
-
Medium 5.3
Path Traversal in Campbell Scientific CSI Web Server and RTMC
The Campbell Scientific CSI Web Server supports a command that will return the most recent file that matches a given expression. A specially crafted expression can lead to a path traversal vulnerability. This command combined with a specially crafted expressi…
-
Medium 5.3
SimpleSAMLphp exposes credentials in session storage
### Background In order to implement support for the SAML Enhanced Client or Proxy profile, the credentials obtained for authentication were stored in the state in order to pass them to the relevant routines. This, however, led to the credentials being record…
-
Medium 5.4
SimpleSAMLphp Link Injection vulnerability
### Background Several scripts part of SimpleSAMLphp display a web page with links obtained from the request parameters. This allows us to enhance usability, as the users are presented with links they can follow after completing a certain action, like logging…
-
Medium 6.5
Improper input validation in the user management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows re…
-
Medium 6.5
Incorrect access control in firmware upgrade function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote…
-
Medium 5.3
Incorrect access control in the outlet control function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remo…
-
Medium 5.3
Incorrect access control in logs management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote …
-
Medium 4.3
silverstripe/userforms file upload exposure on UserForms module
The [userforms module](https://github.com/silverstripe/silverstripe-userforms) allows CMS administrators to create public facing forms with file upload abilities. These files are uploaded into a predictable public path on the website, unless configured otherw…
-
Medium 4.6
Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone vol…
-
Medium 6.7
Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands wi…
-
Medium 6.3
F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point…
-
Medium 5.9
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName par…
-
Medium 6.5
In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network…
-
Medium 5.4
A SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management Sys…
-
Medium 6.3
A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 al…
-
Medium 5.4
A SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allow…
-
Medium 6.5
A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management Syste…
-
Medium 4.8
formwork Cross-site scripting vulnerability in Markdown fields
A cross-site scripting (XSS) vulnerability in the Edit function of Formwork before 1.13.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content field.
-
Medium 6.5
ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.
-
Medium 5.3
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the functio…
-
Medium 5.4
Cross Site Request Forgery vulnerability in iManager
Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to sensitive information disclosure.