10279 matches found
PT-2022-17100
Name of the Vulnerable Software and Affected Versions WP Statistics versions up to and including 13.1.5 Description The issue is related to SQL Injection due to insufficient escaping and parameterization of the IP parameter in the /includes/class-wp-statistics-hits.php file. This allows attackers...
EulerOS 2.0 SP3 : python (EulerOS-SA-2022-1183)
According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the...
Security Bulletin: Vulnerability in Apache Commons FileUpload affects IBM Spectrum Control and Tivoli Storage Productivity Center (CVE-2016-1000031)
Summary A vulnerability in Apache Commons FileUpload affects IBM Spectrum Control formerly Tivoli Storage Productivity Center. Apache Commons FileUpload, as used in IBM Websphere Liberty and other products, could allow a remote attacker to execute arbitrary code on the system, caused by...
CVE-2021-27755
"Sametime Android potential path traversal vulnerability when using File class"...
CVE-2021-27755
"Sametime Android potential path traversal vulnerability when using File class"...
CVE-2021-27755
"Sametime Android potential path traversal vulnerability when using File class"...
Path traversal
"Sametime Android potential path traversal vulnerability when using File class"...
CVE-2021-27755
"Sametime Android potential path traversal vulnerability when using File class"...
CVE-2021-27755
Technical details about CVE-2021-27755 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are stated. Monitor for updates from vendors and security advisories.
CVE-2021-27755: Improper Limitation of a Pathname to a Restricted Directory
"Sametime Android potential path traversal vulnerability when using File class"...
PT-2022-9844
Name of the Vulnerable Software and Affected Versions IBM Sametime versions affected versions not specified Description The issue is related to a potential path traversal vulnerability in the IBM Sametime Android application when using the File class. Recommendations At the moment, there is no...
GSD-2022-1000218 ALSA: hda: Fix UAF of leds class devs at unbinding
ALSA: hda: Fix UAF of leds class devs at unbinding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...
CVE-2022-0138
MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created...
PT-2022-28496
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue is related to a use-after-free UAF flaw in the leds class devs at unbinding. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
The vulnerability of the JDBC driver pgjdbc for connecting Java programs to a PostgreSQL database allows a attacker to execute arbitrary code.
The vulnerability of the JDBC driver pgjdbc, which allows Java programs to connect to PostgreSQL databases, is related to the lack of verification for the implementation of the expected interface class. Exploiting this vulnerability can enable a malicious actor to execute arbitrary code through...
CVE-2021-4134
The Fancy Product Designer WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the ID parameter found in the /inc/api/class-view.php file which allows attackers with administrative level permissions to inject arbitrary SQL queries to obtain sensiti...
CVE-2022-0513
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusionreason parameter found in the /includes/class-wp-statistics-exclusion.php file which allows attackers without authentication to inject arbitrary SQL queries to obtai...
CVE-2022-23358
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement...
CVE-2022-23358
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement...
