Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leave_system/classes/Master.php?f=delete_department.Read More ...
Continue ReadingOctober 06, 2022
discourse-chat is a plugin for the Discourse message board which adds chat functionality. In versions prior to 0.9 some places render a chat channel's name and description in an unsafe way, allowing s ...
Continue ReadingOctober 06, 2022
In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF tokenRead More ...
Continue ReadingOctober 06, 2022
The default privileges for the running service Normand Viewer Service in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and lib ...
Continue ReadingOctober 06, 2022
A vulnerability was discovered in the Remisol Advance v2.0.12.1 and below for the Normand Message Server. On installation, the permissions set by Remisol Advance allow non-privileged users to overwrit ...
Continue ReadingOctober 06, 2022
The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and lib ...
Continue ReadingOctober 06, 2022
Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects: Hitachi Storage Plug-in ...
Continue ReadingOctober 06, 2022
A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbit ...
Continue ReadingOctober 06, 2022
Back to Main