CVE-2023-29741

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause an escalation of privileges attack by manipulating the database...

CVE-2023-29734

CVE-2023-29734 affects edjing Mix for Android (v7.09.01). The issue allows unauthorized apps to escalate privileges by manipulating the app’s database. Documented impact is high (privilege escalation; potential confidentiality, integrity, and availability effects) with CVSS v3.1 base score 9.8. N...

CVE-2023-29742: Undefined Security Weakness

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulating the database...

CVE-2023-29740

An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause a denial of service attack by manipulating the database...

CVE-2023-29745: Origin Validation Error

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database...

PT-2023-22393 · Unknown · Bestweather

Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: An issue in BestWeather allows unauthorized apps to cause a code execution attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, at the moment, there is no information abou...

Faculty Evaluation System SQL Injection Vulnerability (CNVD-2023-45448)

Faculty Evaluation System is a faculty evaluation system. A SQL injection vulnerability exists in Faculty Evaluation System, which can be exploited by an attacker to directly manipulate the database by constructing malicious query statements to obtain sensitive information or perform arbitrary...

CVE-2023-29742

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulating the database...

CVE-2023-29734

An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database...

PT-2023-22391 · Unknown · Alarm Clock For Heavy Sleepers

Name of the Vulnerable Software and Affected Versions: Alarm Clock for Heavy Sleepers version 5.3.2 Description: The issue allows unauthorized apps to cause a denial of service attack by manipulating the database. Recommendations: For Alarm Clock for Heavy Sleepers version 5.3.2, consider...

PT-2023-22395 · Unknown · Bestweather

Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: An issue in BestWeather allows unauthorized apps to cause a persistent denial of service attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, as a temporary workaround,...

PT-2023-22392 · Unknown · Bestweather

Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: An issue in BestWeather allows unauthorized apps to cause a privileges escalation attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, at the moment, there is no informati...

BestWeather 安全漏洞

BestWeather is a weather advisor application from BestWeather open source. A security vulnerability exists in BestWeather version v.7.3.1. An attacker exploited the vulnerability to execute code by manipulating the database...

CVE-2023-29743

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database...

CVE-2023-29741: Undefined Security Weakness

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause an escalation of privileges attack by manipulating the database...

CVE-2023-29741

CVE-2023-29741 affects BestWeather v7.3.1 for Android. The issue enables unauthorized apps to escalate privileges by manipulating the app’s database, per Red Hat, NVD, PRION, CNNVD, and related entries. The connected documents consistently describe the vulnerable component as the database interac...

CVE-2023-29734: Improper Privilege Management

An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database...

Trend Micro Apex Central SQL Injection Vulnerability (CNVD-2023-57659)

Trend Micro Apex Central is a Web-based console from Trend Micro, Inc. Trend Micro Apex Central suffers from an SQl injection vulnerability that can be exploited by an attacker to submit a specially crafted SQL request to manipulate the database, obtain sensitive information or execute arbitrary...

Sql injection

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 243163...

PT-2023-15542

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7 Description The issue allows a remote attacker to send specially crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the back-end database. This is a...