The vulnerability of the Loging component of the Siebel Core platform’s Server Framework in the Oracle Siebel CRM system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Loging component of the Siebel Core platform’s Server Framework in the Oracle Siebel CRM system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using the HTTP...

CVE-2022-30726

CVE-2022-30726 corresponds to an unprotected DeviceSearchTrampoline component in Samsung SecSettingsIntelligence, enabling local attackers to launch SecSettingsIntelligence activities. Affected: Samsung Mobile/SecSettingsIntelligence (DeviceSearchTrampoline). Root cause: unprotected component exp...

Design/Logic Flaw

74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the component /spip.php of Spip Web Framework v3.1.13 and below allows attackers to execute arbitrary web scripts or HTML...

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

CVE-2022-28896

A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1FW130B06 allows attackers to escalate privileges to root via a crafted payload...

Vulnerability of the Cluster component: The general database management system of Oracle MySQL Cluster allows a hacker to gain full control over the application.

Vulnerability of the Cluster component: The general database management system for Oracle MySQL Cluster is vulnerable when operations are performed outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain full control over the application through various network...

The vulnerability of the Utility component of the Solaris operating system, which allows a hacker to gain access to read, modify, add, or delete data.

The vulnerability of the Utility component in the Solaris operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a remote attacker to gain access to read, modify, add, or delete data using various network protocols...

The vulnerability of the History API component in the Cisco SD-WAN vManage network management system allows a attacker to disclose protected information.

The vulnerability of the History API component in the Cisco SD-WAN vManage network management system is related to errors in request processing. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Arbitrary file deletion

HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete...

CVE-2022-27299

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php...

CVE-2022-28008

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendancedelete.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...

Sql injection

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positionedit.php...

Sql injection

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/itemfunc.cc:148...

The vulnerability of the avi.c component of the VLC Media Player allows a hacker to cause a service failure.

The vulnerability of the avi.c component of the VLC Media Player media player is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.

Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable due to buffer overflows in the stack. Exploitation of this vulnerability can allow an attacker to execute arbitrary code remotely...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.

Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable due to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.

Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable due to buffer overflows in the stack. Exploitation of this vulnerability can allow an attacker to execute arbitrary code remotely...

The vulnerability of the Log component in the Oracle Enterprise Session Border Controller allows a perpetrator to cause a partial service disruption.

The vulnerability of the Log component in the Oracle Enterprise Session Border Controller is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause a partial service outage using the HTTP protocol...