Archive
11 June 2024
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Low 3.5
playSMS SMS Schedule cross site scripting
A vulnerability classified as problematic has been found in playSMS up to 1.4.7. Affected is an unknown function of the file /index.php?app=main&inc=feature_schedule&op=list of the component SMS Schedule Handler. The manipulation of the argument name/message …
-
Low 3.3
Smart Rule Overwrite Bypass in BeyondInsight PasswordSafe
A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only smart rules via a specially crafted API request.
-
Low 1.7CVE-2024-21754 Public exploit
A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 a…
-
Low 3.9
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions…
-
Low 3.3
A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates tempor…
-
Low 3.5
smallweigit Avue avueUeditor cross site scripting
A vulnerability classified as problematic was found in smallweigit Avue up to 3.4.4. Affected by this vulnerability is an unknown functionality of the component avueUeditor. The manipulation leads to cross site scripting. The attack can be launched remotely. …
-
Low 3.7
Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling)
On Unix, SAP BusinessObjects Business Intelligence Platform (Scheduling) allows an authenticated attacker with administrator access on the local server to access the password of a local account. As a result, an attacker can obtain non-administrative user cred…