All Posts by: Virtual Patching

MediaWiki up to 1.36 SportsTeams Extension cross site scripting

A vulnerability classified as problematic was found in MediaWiki up to 1.36 (Content Management System). This vulnerability affects an unknown

Common Vulnerabilities and Exposures

Synacor Zimbra Collaboration Suite up to 8.8.15 Patch 22/9.0.0 Patch 15 Web Client loginErrorCode cross site scripting

A vulnerability, which was classified as problematic, has been found in Synacor Zimbra Collaboration Suite up to 8.8.15 Patch 22/9.0.0

Common Vulnerabilities and Exposures

Delta Electronics DOPSoft up to 4.0.10.17 Project out-of-bounds read

A vulnerability was found in Delta Electronics DOPSoft up to 4.0.10.17. It has been classified as problematic. This affects an

Common Vulnerabilities and Exposures

Zyxel USG/USG Flex/Zywall/ATP/VPN up to 4.64 Web-based Management Interface improper authentication

A vulnerability was found in Zyxel USG, USG Flex, Zywall, ATP and VPN up to 4.64 (Firewall Software). It has

Common Vulnerabilities and Exposures

Delta Electronics DOPSoft up to 4.0.10.17 out-of-bounds read

A vulnerability was found in Delta Electronics DOPSoft up to 4.0.10.17. It has been rated as problematic. This issue affects

Common Vulnerabilities and Exposures

Django up to 3.1.12/3.2.4 QuerySet.order_by sql injection

A vulnerability classified as critical has been found in Django up to 3.1.12/3.2.4 (Content Management System). Affected is the function

Common Vulnerabilities and Exposures

Apache Druid up to 0.20.x inputSource information disclosure

A vulnerability was found in Apache Druid up to 0.20.x and classified as problematic. Affected by this issue is an

Common Vulnerabilities and Exposures

IBM Datacap Taskmaster Capture up to 9.1.7 sql injection [CVE-2020-4902]

A vulnerability, which was classified as critical, was found in IBM Datacap Taskmaster Capture up to 9.1.7. Affected is an

Common Vulnerabilities and Exposures

PHPGurukul Teachers Record Management System 1.0 POST Parameter edit-subjects-detail.php editid sql injection

A vulnerability has been found in PHPGurukul Teachers Record Management System 1.0 and classified as critical. Affected by this vulnerability

Common Vulnerabilities and Exposures

IBM Datacap Fastdoc Capture 9.1.7 Web UI cross site scripting

A vulnerability was found in IBM Datacap Fastdoc Capture 9.1.7 and classified as problematic. Affected by this issue is some

Common Vulnerabilities and Exposures

PHPGurukul Teachers Record Management System 1.0 POST Parameter adminprofile.php email cross site scripting

A vulnerability was found in PHPGurukul Teachers Record Management System 1.0. It has been classified as problematic. This affects an

Common Vulnerabilities and Exposures

phpList 3.5.3 Configure Attributes Edit Values cross site scripting

A vulnerability was found in phpList 3.5.3 (Mailing List Software). It has been declared as problematic. This vulnerability affects an

Common Vulnerabilities and Exposures

phpList 3.5.3 Start/continue campaign Send test cross site scripting

A vulnerability was found in phpList 3.5.3 (Mailing List Software). It has been rated as problematic. This issue affects some

Common Vulnerabilities and Exposures

phpList 3.5.3 Edit a List List Description cross site scripting

A vulnerability classified as problematic has been found in phpList 3.5.3 (Mailing List Software). Affected is an unknown part of

Common Vulnerabilities and Exposures

phpList 3.5.3 Categorise Lists Configure categories cross site scripting

A vulnerability classified as problematic was found in phpList 3.5.3 (Mailing List Software). Affected by this vulnerability is an unknown

Common Vulnerabilities and Exposures

phpList 3.5.3 Import Emails Add a list cross site scripting

A vulnerability, which was classified as problematic, has been found in phpList 3.5.3 (Mailing List Software). Affected by this issue

Common Vulnerabilities and Exposures

Stormshield SNS up to 4.2.1 LDAP excessive authentication

A vulnerability, which was classified as problematic, was found in Stormshield SNS up to 4.2.1. This affects some unknown processing

Common Vulnerabilities and Exposures

XWiki up to 12.6.87/12.10.3 Script Service protection mechanism

A vulnerability has been found in XWiki up to 12.6.87/12.10.3 (Content Management System) and classified as problematic. This vulnerability affects

Common Vulnerabilities and Exposures

Johnson Controls C-CURE 9000 Client Auto Update input validation

A vulnerability was found in Johnson Controls C-CURE 9000 (unknown version) and classified as critical. This issue affects an unknown

Common Vulnerabilities and Exposures

SourceCodester Phone Shop Sales Managements System 1.0 id resource injection

A vulnerability was found in SourceCodester Phone Shop Sales Managements System 1.0. It has been classified as critical. Affected is

Common Vulnerabilities and Exposures

XWiki up to 13.1 Reset Password information disclosure

A vulnerability was found in XWiki up to 13.1 (Content Management System). It has been declared as problematic. Affected by

Common Vulnerabilities and Exposures

Akkadian Provisioning Manager 4.50.02 /pme information disclosure

A vulnerability was found in Akkadian Provisioning Manager 4.50.02. It has been rated as problematic. Affected by this issue is

Common Vulnerabilities and Exposures

Akkadian Provisioning Manager 4.50.02 SSH Console access control

A vulnerability classified as critical has been found in Akkadian Provisioning Manager 4.50.02. This affects an unknown code block of

Common Vulnerabilities and Exposures

Johnson Controls Facility Explorer SNC Series Supervisory Controller Web Message privileges management

A vulnerability classified as critical was found in Johnson Controls Facility Explorer SNC Series Supervisory Controller (the affected version is