CVE-2022-28877 Local Privilege Escalation Vulnerability in F-Secure & WithSecure Windows Endpoint Products

This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to...

PT-2022-19281

Name of the Vulnerable Software and Affected Versions F-Secure & WithSecure windows endpoint products affected versions not specified Description This issue allows a local user to delete arbitrary files in the system and bypass security protection, which can be abused for local privilege...

CVE-2022-28877: Undefined Security Weakness

This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to...

CVE-2022-28876

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. The exploit can be triggered remotely by an attacker...

CVE-2022-28876

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. The exploit can be triggered remotely by an attacker...

Denial of service

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. The exploit can be triggered remotely by an attacker...

CVE-2022-28876 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. The exploit can be triggered remotely by an attacker...

CVE-2022-28876

CVE-2022-28876 affects F-Secure Atlant and certain WithSecure products. The aeheur.dll component used by the scanner can crash the scanning engine, enabling a remote attacker to trigger a DoS. Impact is availability loss (per documents). Exploitation details are limited to remote trigger; no reme...

CVE-2022-28876: Undefined Security Weakness

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. The exploit can be triggered remotely by an attacker...

PT-2022-21225

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue is related to a persistent cross-site scripting XSS vulnerability. This vulnerability is present in the /ffos/classes/Master.php?f=save category component. Recommendations For Fast Fo...

PT-2022-19280

Name of the Vulnerable Software and Affected Versions F-Secure Atlant affected versions not specified WithSecure products affected versions not specified Description A Denial-of-Service DoS issue was discovered in F-Secure Atlant and certain WithSecure products. The scanning of the aeheur.dll...

equanimity path traversal vulnerability

equanimity is a world-building game by A. F. Dudley, a solo developer with an emphasis on squad-based turn-based combat and balance. equanimity 2014-04-23 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filte...

PT-2022-21670

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description A SQL injection issue was found in the Online Railway Reservation System. The vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete reservation"...

CVE-2022-33058: Improper Neutralization of Special Elements used in an SQL Command

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletemessage...

PT-2022-21672

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter at the "/classes/Master.php?f=delete train" endpoint. Recommendations For Online Railway...

CVE-2022-33057: Improper Neutralization of Special Elements used in an SQL Command

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

PT-2022-21673

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete schedule" endpoint. Recommendations...

CVE-2022-33059: Improper Neutralization of Special Elements used in an SQL Command

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletetrain...

PT-2022-21671

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter at the "/classes/Master.php?f=delete message" endpoint. Recommendations For Online Railwa...

PT-2022-21674

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete service" API endpoint. Recommendatio...