Categoria: CVE

A vulnerability was found in Roskus Prospero Flow CRM up to 5.15.9. It has been declared as critical. This affects an unknown part of the component Payroll Module. The manipulation results in authorization bypass. This...

A vulnerability was found in Netis NC63 Router up to 3.0.0.3327. It has been classified as very critical. Affected by this issue is some unknown functionality of the file /cgi-bin/upload_fw.cgi of the component Firmware Update...

A vulnerability was found in getgrav Grav up to 1.0.12 and classified as problematic. Affected by this vulnerability is the function create/update of the component Grav API. Executing a manipulation can lead to information...

A vulnerability has been found in GetGrav Grav up to 1.4.6 and classified as problematic. Affected is the function FlexApiController::update of the component Flex Objects API. Performing a manipulation results in improper...

A vulnerability, which was classified as critical, was found in GetGrav Grav API Plugin up to 1.0.11. This impacts the function requirePermission of the component API Key Scope Enforcement. Such manipulation leads to improper...

A vulnerability described as problematic has been identified in actix actix-http up to 3.12.0. Impacted is an unknown function of the component HTTP1.1 Parser. Executing a manipulation can lead to http request smuggling. This...

A vulnerability marked as problematic has been reported in siyuan-note SiYuan up to 3.7.3. This issue affects some unknown processing of the component GetAttributeViewBacklinks Endpoint. Performing a manipulation results in...

A vulnerability labeled as problematic has been found in SiYuan-Note SiYuan up to 3.7.3. This vulnerability affects the function getRefIDsByFileAnnotationID of the component getRefIDsByFileAnnotationID endpoint. Such...

A vulnerability identified as critical has been detected in FileBrowser up to 2.63.18. This affects an unknown part of the component Tus Resumable-Upload Patch Endpoint. This manipulation causes unrestricted upload. This...

A vulnerability categorized as critical has been discovered in filebrowser File Browser up to 2.63.19. Affected by this issue is some unknown functionality of the component Proxy/Hook Authentication Auto-Provisioning. The...

A vulnerability described as critical has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the...

A vulnerability marked as critical has been reported in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the...