Results
28,815· Page 102/577In validationtools, there is a possible missing permission check. This could lead to local information disclosure with n
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with n
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with n
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with n
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with n
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with n
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with n
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with n
Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaSc
Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers
Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated
Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 al
Cross-site scripting (XSS) vulnerability in Invoice Edit Page in Bitrix24 22.0.300 allows attackers to execute arbitrar
A logic error when using mb_strpos() to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass
Unsafe variable extraction in bitrix/modules/main/classes/general/user_options.php in Bitrix24 22.0.300 allows remote au
Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apa
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial
In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local den
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of se
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of se
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of se
In camera driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local deni
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial
Improper Access Control in Dolibarr ERP CRM <= v17.0.3 allows an unauthorized authenticated user to read a database tabl
Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when c
Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, d
The responses for web queries with certain parameters disclose internal path of resources. This information can be used
The response messages received from the eSOMS report generation using certain parameter queries with full file path can
Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the
The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on th
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1.
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.
Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16.
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers
A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin
A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows r
A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin
A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization
A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows r
Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated at
Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted stri
Test your stack for 2023issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.