Riasztások
2025. Már. 3.
NA - CVE-2025-25949 - A stored cross-site scripting (XSS)...
A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML...
2025. Már. 3.
NA - CVE-2025-25950 - Incorrect access control in the component...
Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts,...
2025. Már. 3.
NA - CVE-2025-25951 - An information disclosure vulnerability in the...
An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to...
2025. Már. 3.
NA - CVE-2025-25952 - An Insecure Direct Object References (IDOR) in...
An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows...
2025. Már. 3.
NA - CVE-2025-25953 - Serosoft Solutions Pvt Ltd Academia Student...
Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers...
2025. Már. 3.
NA - CVE-2025-27583 - Incorrect access control in the component...
Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify...
2025. Már. 3.
NA - CVE-2025-27584 - A stored cross-site scripting (XSS)...
A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML...
2025. Már. 3.
NA - CVE-2025-27585 - A stored cross-site scripting (XSS)...
A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML...
2025. Már. 3.
Medium - CVE-2025-1844 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The...
2025. Már. 3.
Medium - CVE-2025-1845 - A vulnerability has been found in ESAFENET DSM...
A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical. Affected by this vulnerability is the function examExportPDF of the file /admin/plan/examExportPDF. The manipulation...