19815 matches found
CVE-2022-46954
Dynamic Transaction Queuing System v1.0 is affected by a SQL injection vulnerability in the /admin/ajax.php?action=delete_transaction endpoint via the id parameter. It is reported as a high-severity issue with CVSS 3.1 (CRITICAL) across NVD/CVE data, indicating an attacker could potentially read/...
Fortinet FortiClient Windows Installer Code Execution
The vulnerability of the Fortinet FortiClient for Windows installer and the FortiClient Enterprise Management Server EMS is related to an uncontrolled DLL search process. Exploiting this vulnerability allows a attacker to execute arbitrary code using a specially crafted DLL library...
CVE-2022-46951
Dynamic Transaction Queuing System v1.0 is affected by a SQL injection vulnerability in the id parameter of /admin/ajax.php?action=delete_uploads. The CVE entry (CVE-2022-46951) notes a high-severity impact (CVSS 7.2, HIGH) with network attack vector, low attack complexity, no user interaction, a...
DEBIAN-CVE-2023-23457
A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...
CVE-2023-23457
A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...
Libraries: Untrusted users can modify some Pipeline libraries in Pipeline Shared Groovy Libraries Plugin
A flaw was found in the Jenkins Pipeline: Shared Groovy Libraries plugin. The Jenkins Pipeline: Shared Groovy Libraries plugin allows attackers to submit pull requests. However, the attacker cannot commit directly to the configured Source Control Management SCM to effectively change the Pipeline...
How to instrument system applications on Android stock images
By Vitor Ventura This post is the result of research presented at Recon Montreal 2022. Two slide decks are provided along with this research . One is the presentation showing the whole process and how to do it on Google Play Protect services. The other one is a workshop on how to do it on an...
CVE-2023-22411 Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device
An Out-of-Bounds Write vulnerability in Flow Processing Daemon flowd of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On SRX Series devices using Unified Policies with IPv6, when a specific IPv6 packet goes through a dynamic-applicatio...
VulnCheck KEV: CVE-2022-42889
Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...
PT-2023-18965
Name of the Vulnerable Software and Affected Versions UPX affected versions not specified Description A Segmentation fault was found in UPX in PackLinuxElf64::invert pt dynamic in p lx elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial ...
CVE-2021-26343
Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure...
Input validation
Insufficient input validation during parsing of the System Management Mode SMM binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement DRTM user application memory that may result in a potential denial of service...
AMD System Management Mode buffer error vulnerability
AMD System Management Mode is a system management mode from Ultraviolet Semiconductor AMD. A CPU execution mode. AMD System Management Mode suffers from a buffer error vulnerability that stems from insufficient validation of input when parsing binaries in its System Management Mode SMM could caus...
CVE-2021-46791
Insufficient input validation during parsing of the System Management Mode SMM binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement DRTM user application memory that may result in a potential denial of service...
2023-01 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5022282)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
SAP BusinessObjects Business Intelligence Platform Cross-site Scripting Vulnerability
SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and deploy...
PT-2023-1402 · Amd · Amd Bios +1
Name of the Vulnerable Software and Affected Versions: AMD BIOS affected versions not specified Description: The issue is related to insufficient validation in ASP BIOS and DRTM commands, which may allow malicious supervisor x86 software to disclose the contents of sensitive memory, resulting in...
CVE-2022-47790
Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display&id=...
