Input validation

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input...

OpenSSL ECDSA Key Recovery

The vulnerability of the OpenSSL library is related to errors in the management of cryptographic keys. Exploiting this vulnerability could allow an attacker to recover encrypted keys of the ECDSA P-256 type...

CVE-2022-28327

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input...

CVE-2022-28327: Undefined Security Weakness

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input...

CVE-2022-28327

CVE-2022-28327 affects Go's crypto/elliptic P-256 in Go up to versions before 1.17.9 and 1.18.x before 1.18.1, where a crafted long scalar input can cause a panic in ScalarMult/ScalarBaseMult, leading to availability impact. Affected component: crypto/elliptic P-256. Mitigation: upgrade Go to 1.1...

CVE-2022-28327

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input...

CVE-2022-28327

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input...

webTareas SQL Injection Vulnerability

webTareas is a web-based open source collaboration tool. The product supports project management, bug tracking, content management and meeting management. A SQL injection vulnerability exists in webTareas version 2.4p3 and earlier versions, which stems from the $uq parameter of...

PT-2022-36949

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A heap-buffer-overflow WRITE 8 crash has been reported, with a crash state involving doemit, doinsert, and p ere. The estimated number of potentially affected devices worldwide is not...

PT-2022-18962

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.17.9 Go versions 1.18.x prior to 1.18.1 Description The issue allows a panic via long scalar input in the generic P-256 feature in crypto/elliptic. A crafted scalar input longer than 32 bytes can cause P256.ScalarMult or...

CVE-2021-43109

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

CVE-2021-43109

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

PT-2022-11788

Name of the Vulnerable Software and Affected Versions PuneethReddyHC online-shopping-system affected versions not specified Description The issue is related to an SQL Injection vulnerability. It affects the PuneethReddyHC online-shopping-system as of 11/01/2021. The vulnerability is exploited via...

CVE-2021-43109: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

PT-2022-11878

Name of the Vulnerable Software and Affected Versions WebRun version 3.6.0.42 Description The issue allows for SQL Injection via the P 0 parameter, which is used to set the username during the login process. No information is provided about the estimated number of potentially affected devices...

p-mexhosting.nl Improper Access Control vulnerability OBB-2438733

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Schneider Electric Easergy P5 Relay SSH Key Management Unauthorized Access

The vulnerability of the microprogramming software in Schneider Electric Easergy P5 relay protection and control devices is related to errors in managing SSH keys. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

CVE-2021-44088

An SQL Injection vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows a remote attacker to bypass authentication via unsanitized login parameters...

Ponton X/P Messenger Cross-Site Scripting Vulnerability

PONTON X/P Messenger is a highly configurable ebXML, AS/1, AS/2, AS/3 and AS/4 compliant messaging software from PONTON Germany. ponton X/P Messenger is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to obtain sensitive user information and construct...

Ponton X/P Messenger path traversal vulnerability

PONTON X/P Messenger is a highly configurable ebXML, AS/1, AS/2, AS/3 and AS/4 compliant messaging software from the German company PONTON. ponton X/P Messenger is vulnerable to a path traversal vulnerability that could be exploited by an attacker to upload executable scripts while obtaining...