CVE-2022-46947: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...

CVE-2022-46949: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletehelmet...

CVE-2022-46472: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/classes/Users.php?f=delete...

CVE-2022-46360

Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-47524

F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...

Authentication flaw

F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...

CVE-2022-47524

CVE-2022-47524 affects F-Secure SAFE Browser on Android (version 19.1 prior to 19.2). The issue is an IDN homograph attack that could enable spoofing of legitimate domains. Root cause is the handling of Internationalized Domain Names allowing homogeneous-looking characters to pass validation, ena...

CVE-2022-47524

F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...

CVE-2022-47524: Undefined Security Weakness

F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...

F-Secure SAFE 安全漏洞

F-Secure SAFE is a suite of antivirus software from Finnish company Fen Secure F-Secure. A security vulnerability exists in F-Secure SAFE Browser 19.1 for Android prior to version 19.2, which stems from vulnerability to IDN synonym attacks...

CVE-2022-47524

F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...

PT-2022-28071 · F Secure · F-Secure Safe Browser

Name of the Vulnerable Software and Affected Versions: F-Secure SAFE Browser versions 19.1 through 19.1 Description: The issue allows an IDN homograph attack. This type of attack involves using similar-looking characters from different alphabets to create fake domain names that appear legitimate,...

CVE-2022-46127: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=deleteproduct...

Mitsubishi Electric FA Engineering Software (Update C)

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GX Works3, MX OPC UA Module Configurator-R Vulnerabilities: Cleartext Storage of Sensitive Information, Use of Hard-coded Password, Insufficiently Protected Credentials,...

CVE-2022-43442

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

Design/Logic Flaw

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

CVE-2022-43442: Insufficiently Protected Credentials

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

CVE-2022-43442

CVE-2022-43442 affects FUJISOFT +F FS040U (and related devices in the same family) with plaintext password storage in software versions v2.3.4 and earlier. 根本原因: passwords stored in clear text, enabling an attacker to obtain the login password and log in to the management console. Impact stated: ...

CVE-2022-43442

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console...

CVE-2022-43470: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in +F FS040U software versions v2.3.4 and earlier, +F FS020W software versions v4.0.0 and earlier, +F FS030W software versions v3.3.5 and earlier, and +F FS040W software versions v1.4.1 and earlier allows an adjacent attacker to hijack the...