CVE-2021-27828

CVE-2021-27828 affects In4Suite ERP 3.2.74.1370, where SQL injection arises from lack of validation of externally entered SQL statements in CheckLogin.asp, enabling remote attackers to modify or delete data and cause persistent changes. Evidence includes exploit-db PoC showing crafted login paylo...

PT-2021-17633

Name of the Vulnerable Software and Affected Versions: In4Suite ERP version 3.2.74.1370 Description: The issue allows attackers to modify or delete data by using malicious SQL queries, resulting in persistent changes to the application's content or behavior. Recommendations: For In4Suite ERP...

Microsoft Edge security feature vulnerability

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge suffers from a security signature issue vulnerability that allows remote attackers to trick victims into visiting specially designed websites to obtain sensitive information or...

Microsoft Edge security feature vulnerability

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge suffers from a security signature issue vulnerability that allows remote attackers to bypass current security restrictions and trick victims into visiting specially designed...

vFairs Cross-Site Scripting Vulnerabilities

vFairs is a virtual event platform by vFairs Singapore. It hosts exciting online conferences, trade shows, job fairs and more. A security vulnerability exists in vFairs version 3.3 that allows any user logged in to a vFairs virtual meeting to modify any other user's information, which could lead ...

PT-2021-19780

Name of the Vulnerable Software and Affected Versions No specific software or version information is provided. Description A security issue was found in the process report function, which allowed arbitrary file writes via symlinks. This could potentially lead to unauthorized data modification...

CVE-2020-25408: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data...

Projectsworlds College Management System Cross-site Request Forgery Vulnerability

ProjectWorlds College Management System is a college management system. projectWorlds College Management System is vulnerable to cross-site request forgery, which can be exploited by attackers to modify, delete student, faculty, teacher, subject, grade, location, and article data or create new...

Windows kernel API Unauthorized Access

The vulnerability of the Windows operating system’s kernel API is related to errors in the FileObject structure. Exploiting this vulnerability can allow an attacker to gain unauthorized access to modify, add, or delete data...

PT-2021-11136

Name of the Vulnerable Software and Affected Versions: ProjectWorlds College Management System Php version 1.0 Description: A Cross-Site Request Forgery CSRF issue exists, allowing a remote attacker to modify, delete, or create new entries for student, faculty, teacher, subject, scores, location,...

PeopleSoft Enterprise PeopleTools Unauthorized Access

The vulnerability of the Multichannel Framework component of the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or to...

“Manage Requisition Status” component Unauthorized Access

The vulnerability of the “Manage Requisition Status” component in the Oracle PeopleSoft Enterprise SCM eProcurement application is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

Oracle MySQL Audit Plugin Data Manipulation

The vulnerability of the Server component: The Audit Plug-in of the Oracle MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data using the MySQL network protoco...

Core Component Oracle Advanced Supply Chain Planning Unauthorized Access

The vulnerability of the Core component of the Oracle Advanced Supply Chain Planning application relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information or to modify, add, or...

Documents Component Oracle One-to-One Fulfillment Data Access

The vulnerability of the Documents component in the Oracle One-to-One Fulfillment application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to update, modify, or delete data using the HTTP protocol...

CVE-2020-4990

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...

Design/Logic Flaw

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorre...

CVE-2021-27465: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorre...

Oracle Hyperion Financial Management Task Automation Privileged Access

The vulnerability of the Task Automation component of the Oracle Hyperion Financial Management application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain read access to data, modify data, cause partial service failure, or...

Outside In Filters Component Privilege Escalation

The vulnerability of the Outside In Filters component within Oracle’s software development kit SDK “Outside In Technology” exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to gain read access to data, modify, add, or delete data, or cause a...