20967 matches found
CVE-2024-20366: External Control of File Name or Path
A vulnerability in the Tail-f High Availability Cluster Communications HCC function pack of Cisco Crosswork Network Services Orchestrator NSO could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability exists because a user-controlled searc...
CVE-2024-4726
A vulnerability was found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/clients. The manipulation of the argument fname leads to cross site scripting. The attack may be launched remotely. The...
CVE-2024-4725
A vulnerability has been found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientuser. The manipulation of the argument fname leads to cross site scripting. The attack can be launched...
CVE-2024-4820: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/SystemSettings.php?f=updatesettings. The manipulation leads to unrestricted upload. The attack can be...
PT-2024-32495
Name of the Vulnerable Software and Affected Versions Campcodes Legal Case Management System version 1.0 Description A vulnerability has been found in the system, classified as problematic, affecting an unknown functionality of the file /admin/client user. The manipulation of the f name argument...
PT-2024-32498
Name of the Vulnerable Software and Affected Versions Campcodes Legal Case Management System version 1.0 Description A problem was found in the system, affecting some unknown functionality of the file "/admin/clients". The manipulation of the f name argument leads to cross-site scripting. The...
PT-2024-6851
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The issue is related to the incorrect initialization of the seqpacket allow function in the Linux kernel. There are two problems with seqpacket allow: it is not initialized when a socket is...
CVE-2024-31750
SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter...
CVE-2024-31750
SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter...
Mitsubishi Electric MELSEC iQ-F Series Insufficient Resource Pool (CVE-2023-7033)
Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote attacker to cause a temporary Denial of Service condition for a certain period of time in Ethernet communication of the products by performing TCP SYN...
CVE-2024-31750
SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter...
CVE-2024-31750: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter...
F-logic DataCube3 安全漏洞
F-logic DataCube3 is a small measurement terminal system from F-logic Japan. A security vulnerability exists in F-logic DataCube3 version v.1.0, which stems from a SQL injection vulnerability in the reqid parameter...
PT-2024-24196 · Unknown · F-Logic Datacube3
Name of the Vulnerable Software and Affected Versions: f-logic datacube3 version 1.0 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via the req id parameter. This enables the attacker to potentially extract or modify data without proper authorization...
CVE-2024-31750
The f-logic datacube3 v.1.0 measurement terminal system contains a SQL injection vulnerability (CWE-89) in the req_id parameter. A remote attacker can exploit this flaw to execute arbitrary SQL queries, potentially extracting or modifying sensitive database information without authorization. Whil...
CVE-2024-31544: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrowername”, “facultydepartment” parameters in /classes/Master.php?f=saverecord...
PT-2024-3369
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free error in the Linux kernel's USB gadget functionality, specifically in the f ncm module. When the ncm function is working and the usb0 interface...
PT-2024-6462 · D Link · D-Link Dns-321 +16
Name of the Vulnerable Software and Affected Versions: D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 up to 20240814 Description: A...
PT-2024-24037
Name of the Vulnerable Software and Affected Versions SourceCodester Computer Laboratory Management System version 1.0 Description A critical issue has been found in the function save users of the file /classes/Users.php?f=save, where the manipulation of the argument id leads to improper...