851
|
- |
|
-
|
-
|
A vulnerability was found in TCS BaNCS 10. It has been classified as problematic. This affects an unknown part of the file /REPORTS/REPORTS_SHOW_FILE.jsp. The manipulation of the argument FilePath le…
|
CWE-73
External Control of File Name or Path
|
CVE-2025-0202
|
2025-01-4 14:15 |
2025-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
852
|
- |
|
-
|
-
|
A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/update…
|
CWE-89 CWE-74
SQL Injection Injection
|
CVE-2025-0201
|
2025-01-4 13:15 |
2025-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
853
|
- |
|
-
|
-
|
A vulnerability has been found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /…
|
CWE-89 CWE-74
SQL Injection Injection
|
CVE-2025-0200
|
2025-01-4 12:15 |
2025-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
854
|
- |
|
-
|
-
|
An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS, where the application does not properly validate uploaded files. This allow…
|
-
|
CVE-2025-22389
|
2025-01-4 12:15 |
2025-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
855
|
- |
|
-
|
-
|
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewal…
|
-
|
CVE-2024-3393
|
2025-01-4 11:00 |
2024-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
856
|
- |
|
-
|
-
|
A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected is an unknown function of the file /user/minus_cart.php. The…
|
CWE-89 CWE-74
SQL Injection Injection
|
CVE-2025-0199
|
2025-01-4 08:15 |
2025-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
857
|
4.3 |
MEDIUM
Network
|
-
|
-
|
IBM PowerHA SystemMirror for i 7.4 and 7.5
does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to …
|
-
|
CVE-2024-55897
|
2025-01-4 08:15 |
2025-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
858
|
5.4 |
MEDIUM
Network
|
-
|
-
|
IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content via iFrames. This vulnerability could allow an attacker to gain improper access and perform unauthori…
|
CWE-451
User Interface (UI) Misrepresentation of Critical Information
|
CVE-2024-55896
|
2025-01-4 08:15 |
2025-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
859
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.15 via the rjg_get_youtube_info_justifi…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2024-12237
|
2025-01-4 08:15 |
2025-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
860
|
7.3 |
HIGH
Network
-
|
-
|
The The WordPress Popular Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.1.0. This is due to the software allowing users to execute …
|
CWE-94
Code Injection
|
CVE-2024-11733
|
2025-01-4 08:15 |
2025-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|