JTEKT TOYOPUC Products 访问控制错误漏洞

JTEKT TOYOPUC Products is a family of programmable controllers from JTEKT Japan. An access control error vulnerability exists in JTEKT TOYOPUC Products that stems from a lack of authentication functionality in the affected products. An attacker could use this vulnerability to change the controlle...

PT-2022-11418

Name of the Vulnerable Software and Affected Versions NOKIA VitalSuite SPM version 2020 Description The issue is related to SQL injection through the UserName variable. This allows for potential unauthorized access or manipulation of data. Recommendations For NOKIA VitalSuite SPM version 2020,...

PT-2022-21256

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/categories/manage field order.php?id=" API endpoint, where the id variable is vulnerable. This allows for potential unauthorized access and...

PT-2022-21266

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the /psrs/admin/?page=inquiries/view inquiry&id= endpoint. This allows for potential data manipulation. No information is provided about the estimated number o...

Security Updates for Microsoft Office Products C2R (January 2020)

The Microsoft Office Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited...

Vulnerability fixed in Fortinet products

Vulnerabilities have been fixed in several products from Fortinet. The vulnerabilities allow a malicious party to execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Manipulation of data Circumvention of security measure Remote code execution...

PT-2022-21022

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the bcms/classes/Master.php endpoint, specifically when the f parameter is set to delete product. This allows...

PT-2022-21050

Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue concerns SQL Injection via the /ip/car-rental-management-system/admin/ajax.php?action=login API endpoint. This allows for potential unauthorized access and data manipulation. No...

Car Rental Management System SQL注入漏洞

Car Rental Management System is a car rental management system. SQL injection vulnerability exists in Car Rental Management System, which can be exploited by attackers to view, add, modify or delete information in the back-end database...

Vulnerabilities fixed in IBM QRadar SIEM

Vulnerabilities have been fixed in the IBM QRadar Data Synchronization App for IBM QRadar SIEM. The vulnerabilities are are in underlying software and libraries, such as Node.js and SQLite. The vulnerabilities potentially enable a malicious person to able to perform attacks that result in the...

CVE-2022-24848

DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the /api/programs/orgUnits?programs= API endpoint in DHIS2 versions prior to 2.36.10.1 and 2.37.6.1. The system is vulnerable to attack only from...

CVE-2022-24848 SQL Injection in DHIS2's in OrgUnit program association

DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the /api/programs/orgUnits?programs= API endpoint in DHIS2 versions prior to 2.36.10.1 and 2.37.6.1. The system is vulnerable to attack only from...

CVE-2022-30190

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs,...

PT-2022-16922

Name of the Vulnerable Software and Affected Versions DHIS2 versions prior to 2.36.10.1 and 2.37.6.1 Description DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security issue affects the "/api/programs/orgUnits?programs=" API...

PT-2022-21016

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the "/ofrs/admin/?page=requests/view request&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized...

Exploit for CVE-2022-30190

CVE-2022-30190 On Monday May 30, 2022, Microsoft issued CVE...

PT-2022-20341

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue allows for SQL Injection via the adminpackage edit.php endpoint. This could potentially lead to unauthorized access or manipulation of data. Recommendations For Wedding Management...

PT-2022-20318

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the admin/editproductetails.php endpoint. This allows for potential unauthorized access and manipulation of data. Recommendations...

PT-2022-20340

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the admin/client assign.php endpoint. This allows for potential unauthorized access or manipulation of data. Recommendations Fo...

PT-2022-20343

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue allows for SQL Injection via the adminusers edit.php endpoint. This could potentially lead to unauthorized access or manipulation of data. Recommendations For Wedding Management Syste...