aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control. The web application does not validate user session when accessing many application pages. This can all ...
Continue ReadingSeptember 09, 2022
Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords.Read More ...
Continue ReadingSeptember 09, 2022
A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system.Read More ...
Continue ReadingSeptember 09, 2022
OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.Read More ...
Continue ReadingSeptember 09, 2022
An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter.Read More ...
Continue ReadingSeptember 09, 2022
SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:j_id88, UserForm:j_id90, and UserForm:j_id92 parameters at /SVFE2/pages/feegroups/service_gro ...
Continue ReadingSeptember 09, 2022
An issue was discovered in WSO2 Enterprise Integrator 6.4.0. A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console under /carbon/mediation_secure_vault/pro ...
Continue ReadingSeptember 09, 2022
An issue was discovered in WSO2 Enterprise Integrator 6.4.0. A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console under /carbon/ndatasource/validateconnec ...
Continue ReadingSeptember 09, 2022
Back to Main