Lucene search
+L

20969 matches found

CNVD
CNVD
•added 2022/08/29 12:00 a.m.•60 views

Ingredients Stock Management System SQL Injection Vulnerability

Ingredients Stock Management System is an ingredient stock management system by Carlo Montero. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /classes/Master .php?f=deletewaste location has an SQL injection issue with the id parameter. No...

9.8CVSS2.9AI score0.01033EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/08/26 12:00 a.m.•8 views

PT-2022-23552

Name of the Vulnerable Software and Affected Versions Simple Task Scheduling System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete payment" endpoint. Recommendations For...

9.8CVSS0.01033EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/26 12:00 a.m.•7 views

CVE-2022-36681: Improper Neutralization of Special Elements used in an SQL Command

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteaccount...

9.8CVSS8.2AI score0.01033EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/26 12:00 a.m.•6 views

CVE-2022-36678: Improper Neutralization of Special Elements used in an SQL Command

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...

9.8CVSS8.2AI score0.01033EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/26 12:00 a.m.•3 views

PT-2022-23842

Name of the Vulnerable Software and Affected Versions Online Diagnostic Lab Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the dob parameter in the "/classes/Users.php?f=save client" API endpoint...

9.8CVSS0.01082EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/08/25 12:00 a.m.•4 views

PT-2022-23563

Name of the Vulnerable Software and Affected Versions Ingredients Stock Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete waste" API endpoint. Recommendatio...

9.8CVSS0.01033EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/08/25 12:00 a.m.•3 views

PT-2022-23560

Name of the Vulnerable Software and Affected Versions Ingredients Stock Management System version 1.0 Description A SQL injection issue was found in the system, specifically via the id parameter at the "/classes/Master.php?f=delete item" endpoint. This allows for potential exploitation...

9.8CVSS0.00914EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/25 12:00 a.m.•5 views

CVE-2022-36693: Improper Neutralization of Special Elements used in an SQL Command

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteitem...

9.8CVSS8.2AI score0.00914EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/25 12:00 a.m.•6 views

CVE-2022-36696: Improper Neutralization of Special Elements used in an SQL Command

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletestockout...

9.8CVSS8.2AI score0.01033EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/08/23 4:15 p.m.•8 views

CVE-2022-28882

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker...

7.5CVSS7AI score0.00444EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/08/23 4:15 p.m.•13 views

CVE-2022-28883

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible scanning engine crash. The exploit can be triggered remotely by an attacker...

7.5CVSS7AI score0.0059EPSS
SaveExploits0References2
NVD
NVD
•added 2022/08/23 4:15 p.m.•28 views

CVE-2022-28882

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker...

7.5CVSS0.00444EPSS
SaveExploits0References1
NVD
NVD
•added 2022/08/23 4:15 p.m.•32 views

CVE-2022-28883

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible scanning engine crash. The exploit can be triggered remotely by an attacker...

7.5CVSS0.0059EPSS
SaveExploits0References1
Prion
Prion
•added 2022/08/23 4:15 p.m.•31 views

Denial of service

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker...

5CVSS7.5AI score0.00444EPSS
SaveExploits0References1
Prion
Prion
•added 2022/08/23 4:15 p.m.•30 views

Denial of service

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible scanning engine crash. The exploit can be triggered remotely by an attacker...

5CVSS7.4AI score0.0059EPSS
SaveExploits0References1
CVE
CVE
•added 2022/08/23 3:54 p.m.•95 views

CVE-2022-28883

CVE-2022-28883 is a DoS vulnerability affecting F-Secure & WithSecure products. The issue arises in the aerdl unpack function, where the unpack process crashes, potentially causing a scanning engine crash. Exploitation can be triggered remotely by an attacker. The available connected documents de...

7.5CVSS5.4AI score0.0059EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/08/23 3:54 p.m.•42 views

CVE-2022-28883 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible scanning engine crash. The exploit can be triggered remotely by an attacker...

3.5CVSS7.6AI score0.0059EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/08/23 3:54 p.m.•49 views

CVE-2022-28882 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker...

4.3CVSS7.6AI score0.00444EPSS
SaveExploits0References1
CVE
CVE
•added 2022/08/23 3:54 p.m.•108 views

CVE-2022-28882

CVE-2022-28882 affects F-Secure & WithSecure products. The issue is in the aegen.dll component, which can enter an infinite loop when unpacking PE files, causing the scanning engine to crash. The vulnerability can be triggered remotely by an attacker, as noted in the source description. Some conn...

7.5CVSS5.8AI score0.00444EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/23 12:00 a.m.•9 views

CVE-2022-28883: Undefined Security Weakness

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible scanning engine crash. The exploit can be triggered remotely by an attacker...

7.5CVSS7.2AI score0.0059EPSS
SaveExploits0References1
Rows per page
Query Builder