webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /contacts/listcontacts.php. This vulnerability allows attackers to execute arbitrary web scripts o ...
Continue ReadingDecember 02, 2022
Horner Automationâs RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remotely execute arb ...
Continue ReadingDecember 02, 2022
webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php.Read More ...
Continue ReadingDecember 02, 2022
Horner Automationâs RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from the device.Read More ...
Continue ReadingDecember 02, 2022
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field function at /index.php?module=entities/fields&entities_id=24. This vulnerability ...
Continue ReadingDecember 02, 2022
webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php.Read More ...
Continue ReadingDecember 02, 2022
webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the Chat function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted pa ...
Continue ReadingDecember 02, 2022
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in /index.php?module=configuration/application. This vulnerability allows attackers to execute arbitrary ...
Continue ReadingDecember 02, 2022
Back to Main