17 matches found
CVE-2025-10598 SourceCodester Pet Grooming Management Software search_product.php sql injection
A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/searchproduct.php. Such manipulation of the argument groupid leads to sql injection. The attack may be launched remotely. The exploit is publicly...
CVE-2019-10598
Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop further will not cause an overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...
CVE-2024-10598
creationtimestamp| type| source ---|---|--- 2024-10-31 23:37:59+00:00| seen| https://t.me/cvedetector/9546...
CVE-2024-10598
A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...
CVE-2024-10598
A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...
CVE-2024-10598 Tongda OA Annual Leave data.php improper authorization
A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...
CVE-2024-10598 Tongda OA Annual Leave data.php improper authorization
A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...
CVE-2020-10598
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...
CVE-2020-10598
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...
CVE-2020-10598
CVE-2020-10598 affects BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1. The issue is a restricted desktop environment escape in kiosk mode. Somelike crafted inputs could allow a user with access to escape the restricted environment and access sensitive data. The a...
CVE-2020-10598
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...
CVE-2019-10598
CVE-2019-10598 is a Qualcomm/ Snapdragon WLAN host vulnerability where an out-of-bounds access can occur while processing peer info in IBSS mode due to a missing upper-bound check in a loop. Affected products include Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consum...
CVE-2019-10598
creationtimestamp| type| source ---|---|--- 2019-12-11 03:00:17+00:00| seen| https://t.me/indoghostsec/731 2019-12-11 16:24:35+00:00| seen| https://t.me/indoghostsec/751 2019-12-13 11:21:12+00:00| seen| Telegram/iQUZE2pIByE4vkwExY2sw7tjReCcmi36nOFNFwktNW4 2019-12-14 01:31:35+00:00| seen|...
CVE-2018-10598
CVE-2018-10598 affects Delta Electronics CNCSoft ScreenEditor: two out-of-bounds read vulnerabilities in CNCSoft 1.00.83 and earlier with ScreenEditor 1.00.54, caused by lack of input validation when processing project files. Impact stated in sources: potential remote code execution with administ...
CVE-2016-10598
arrayfire-js is a module for ArrayFire for the Node.js platform. arrayfire-js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the...
CVE-2016-10598
CVE-2016-10598 affects the Node.js module arrayfire-js . The vulnerability arises because it downloads binary resources over HTTP, enabling MitM interception. If an attacker on the network can swap the requested binary with a malicious one, remote code execution (RCE) may be possible on the host ...
CVE-2017-18020
On Samsung mobile devices with L5.x, M6.x, and N7.x software and Exynos chipsets, attackers can execute arbitrary code in the bootloader because S Boot omits a size check during a copy of ramfs data to memory. The Samsung ID is SVE-2017-10598...