Güncel Güvenlik Açıkları

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Name parameter. Devamını Oku Kaynak: NIST

Cross-site Scripting (XSS) – Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.9. Devamını Oku Kaynak: NIST

OS Command Injection in GitHub repository ljharb/npm-lockfile in v2.0.3 and v2.0.4. Devamını Oku Kaynak: NIST

OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php. An attacker can inject JavaScript code to get the user's cookie and take over the working session of user. Devamını Oku Kaynak: NIST

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer (e.g., by using the default credentials) can download the address book file, which contains the list of users (domain users, FTP users, etc.) stored on the printer, together with their encrypted…

Wordline HIDCCEMonitorSVC before v5.2.4.3 contains an unquoted service path which allows attackers to escalate privileges to the system level. Devamını Oku Kaynak: NIST

An Arm product family through 2022-01-03 has an Exposed Dangerous Method or Function. Devamını Oku Kaynak: NIST

Remote Desktop Commander Suite Agent before v4.8 contains an unquoted service path which allows attackers to escalate privileges to the system level. Devamını Oku Kaynak: NIST

OS4ED openSIS 8.0 is affected by SQL injection in ChooseCpSearch.php, ChooseRequestSearch.php. An attacker can inject a SQL query to extract information from the database. Devamını Oku Kaynak: NIST