Insufficient covariance check makes self_cell unsound

All public versions prior to 1.02 used an insufficient check to ensure that users correctly marked the dependent type as either covariant or notcovariant. This allowed users to mark a dependent as covariant even though its type was not covariant but invariant, for certain invariant types involvin...

CVE-2023-3717

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Farmakom Remote Administration Console allows SQL Injection. This issue affects Remote Administration Console: before 1.02...

CVE-2023-3717

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Farmakom Remote Administration Console allows SQL Injection. This issue affects Remote Administration Console: before 1.02...

CVE-2023-3717

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Farmakom Remote Administration Console allows SQL Injection.This issue affects Remote Administration Console: before 1.02...

Farmakom Remote Administration Console SQL Injection Vulnerability

Farmakom Remote Administration Console is a software from Farmakom, Inc. A SQL injection vulnerability exists in Farmakom Remote Administration Console versions prior to 1.02, which stems from incorrect neutralization of special elements used in SQL commands...

PT-2023-25815

Name of the Vulnerable Software and Affected Versions Farmakom Remote Administration Console versions prior to 1.02 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2023-26616

D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo...

CVE-2022-4621

Panasonic Sanyo CCTV Network Cameras versions 1.02-05 and 2.03-0x are vulnerable to CSRFs that can be exploited to allow an attacker to perform changes with administrator level privileges...

多款Panasonic产品跨站请求伪造漏洞

The Panasonic VCC-HD5600P, among others, is a surveillance camera from Panasonic Corporation Panasonic of Japan. A cross-site request forgery vulnerability exists in multiple Panasonic products, versions 1.02-05 and 2.03-0x, which stems from vulnerability to cross-site request forgery attacks. An...

CVE-2021-20092

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor...

Plum Ik-401 Security Issue Vulnerability

The Plum Ik-401 is a 4G modem/router from Plum Germany for use in industrial environments. A security vulnerability exists in Plum IK-401 versions prior to 1.02, which can be exploited by an attacker accessing the device over the network to obtain a configuration file, including hashed credential...

CVE-2020-28946

An improper webserver configuration on Plum IK-401 devices with firmware before 1.02 allows an attacker with network access to the device to obtain the configuration file, including hashed credential data. Successful exploitation could allow access to hashed credential data with a single...

RICOH Printers 'CVE-2019-14302' Debug Port Vulnerability

Multiple RICOH printers and multifunction printers are prone to a vulnerability where a debug port can be used. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

CVE-2013-1599

CVE-2013-1599 is a remote OS command-injection vulnerability in the D-Link IP cameras’ web interface, specifically in /var/www/cgi-bin/rtpd.cgi. A remote attacker can craft a request to trigger arbitrary command execution on affected devices. Affected devices include DCS-3411/3430 (1.02), DCS-560...

CVE-2019-14464

XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow...

CVE-2019-0280

CVE-2019-0280 affects SAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03–6.06, 6.16–6.18, and 8.0; S4CORE 1.01–1.03). The issue is missing authorization checks on objects T_DEAL_DP and T_DEAL_PD, leading to escalation of privileges. The vulnerability is documented with HIGH impact per CVSSv3 ...

CVE-2018-9032

An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router Hardware Version : A1, B1; Firmware Version : 1.02-2.06 devices potentially allows attackers to bypass SharePort Web Access Portal by directly visiting /categoryview.php or /folderview.php...

PHP Multi Vendor Script 1.02 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PHP Multi Vendor Script v1.02 - 'sid' Parameter SQL Injection Date: 2017-09-28 Exploit Author: 8bitsec Vendor Homepage: http://www.dexteritysolution.com/ Software Link:...

CVE-2017-2274

Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...