Web Application Firewall

SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow for an invalid Bean ID to be submitted

Overview :

SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow for an invalid Bean ID to be submitted.

Vulnerability Details :

CVE-2020-8787

Security

CVE: 2020-8803 – Local File Inclusion
CVE: 2020-8801 – PHP Object Injections
CVE: 2020-8800 – Second-Order PHP Object Injections
CVE: 2020-8802 – Bean Manipulation

Bug Fixes

Issue: 8541 – MySQL Database breaking on special characters
Backward incompatible config changes

What Is An SNMP Amplification Attack? How Does SNMP Amplification Work?

CVE-2023-48782 : FORTINET FORTIWLM UP TO 8.6.5 HTTP GET REQUEST OS COMMAND INJECTION

CVE-2023-45174 : IBM AIX/VIOS QDAEMON COMMAND ACCESS CONTROL

zzcms 2018 template_user.php ml/title code injection

August 26, 2021 No Comments

A vulnerability was found in zzcms 2018 (Content Management System) and classified as critical. This issue affects an unknown function

ZyXEL VPN2S 1.12 Web Server path traversal

September 29, 2021 No Comments

A vulnerability classified as problematic was found in ZyXEL VPN2S 1.12. Affected by this vulnerability is an unknown part of

Zyxel VPN2S 1.12 CGI Program os command injection

September 29, 2021 No Comments

A vulnerability has been found in Zyxel VPN2S 1.12 and classified as critical. This vulnerability affects some unknown processing of

Zyxel USG/USG Flex/Zywall/ATP/VPN up to 4.64 Web-based Management Interface improper authentication

July 2, 2021 No Comments

A vulnerability was found in Zyxel USG, USG Flex, Zywall, ATP and VPN up to 4.64 (Firewall Software). It has

ZyXEL GS1900-8 2.60 LLDP Packet cross site scripting

July 26, 2021 No Comments

A vulnerability was found in ZyXEL GS1900-8 2.60. It has been classified as problematic. This affects an unknown code of

Zynamics BinDiff up to 6 i64 File use after free

June 30, 2021 No Comments

A vulnerability, which was classified as critical, has been found in Zynamics BinDiff up to 6. This issue affects an

CVE-2024-53290 : DELL WYSE PROPRIETARY OS 2408 COMMAND INJECTION

December 11, 2024 No Comments

Description Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command (‘Command Injection’) vulnerability. An

CVE-2024-35117 : IBM OPENPAGES WITH WATSON 9.0 TRACING LOG FILE CLEARTEXT STORAGE