CVE-2023-3502 SourceCodester Shopping Website search-result.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Shopping Website 1.0. Affected is an unknown function of the file search-result.php. The manipulation of the argument product leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-3502

The CVE-2023-3502 entry concerns the SourceCodester Shopping Website 1.0. A vulnerability exists in an unknown function within search-result.php where manipulating the product argument leads to SQL injection. This can be exploited remotely and is publicly disclosed (VDB-232950). Affected software...

SUSE CVE-2021-36217

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2022-3502 Human Resource Management System Leave cross site scripting

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2022-3502

CVE-2022-3502 affects Human Resource Management System (HRMS) version 1.0, specifically the Leave Handler component. The vulnerability arises from manipulation of the Reason argument, enabling cross-site scripting (XSS). The issue is exploitable remotely and the exploit has been disclosed publicl...

RHEL 7 : Red Hat OpenStack Platform 10.0 (openstack-neutron) (RHSA-2021:3502)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3502 advisory. Neutron is a virtual network service for OpenStack. Just like OpenStack Nova provides an API to dynamically request and configure virtual servers,...

SUSE SLED12: cairo-devel / libcairo-gobject2 / libcairo-gobject2-32bit / etc (SUSE-SU-2021:3502-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3502-1 advisory. - CVE-2019-6462: Fixed a potentially infinite loop bsc1122321. Tenable has extracted the preceding description block directly from...

CVE-2021-36217

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. A...

CVE-2021-36217

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2021-36217

CVE-2021-36217 is rejected/not used; refer to CVE-2021-3502.

USN-5008-1: Avahi vulnerabilities

Thomas Kremer discovered that Avahi incorrectly handled termination signals on the Unix socket. A local attacker could possibly use this issue to cause Avahi to hang, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10. CVE-2021-3468 It...

AZL-40943 CVE-2021-3502 affecting package avahi for versions less than 0.8-1

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

CVE-2021-3502

CVE-2021-3502 affects Avahi (vulnerable: avahi 0.8-5). The flaw is a reachable assertion in the function avahi_s_host_name_resolver_start , which allows a local attacker to crash the avahi-daemon by issuing hostname resolutions for badly formatted hostnames via the avahi socket or D-Bus. Impact: ...

CVE-2020-3502

Cisco Webex Meetings Desktop App contains information disclosure vulnerabilities in its user interface due to improper input validation of parameters returned from a website. An authenticated remote attacker could lure a user via a crafted URL to extract restricted information from other Webex us...

Security Bulletin: IBM Mobile Foundation, IBM Worklight, and IBM Worklight Foundation are affected by the following Apache Cordova vulnerabilities: CVE-2014-3500, CVE-2014-3501 and CVE-2014-3502

Summary Apache Cordova, which is used by these products, is vulnerable to Cross-Application Scripting XAS and Data Exfiltration vulnerabilities. A remote attacker might exploit these vulnerabilities to expose sensitive data from the mobile application. Vulnerability Details CVEID: CVE-2014-3500...

CVE-2017-3502

Vulnerability in the PeopleSoft Enterprise FIN Receivables component of Oracle PeopleSoft Products subcomponent: Receivables. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3502

CVE-2017-3502 describes a vulnerability in the Oracle PeopleSoft Enterprise FIN Receivables component (subcomponent: Receivables) affecting the 9.2 line. The connected documents consistently state that an unauthenticated attacker with network access over HTTP can compromise FIN Receivables, poten...

GroundWork monarch_scan.cgi OS Command Injection (CVE-2013-3502)

A vulnerability exists in GroundWork 6.7.0. The vulnerability exists in the monarchscan.cgi where user controlled input is used in a perl function. This allows any remote authenticated attacker, regardless of privileges, to inject system commands and gain arbitrary code execution...

CVE-2016-3502

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-3502

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...