CVE-2022-28884 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...

CVE-2022-28884

CVE-2022-28884 affects F-Secure and WithSecure products, where the aerdl.dll component may enter an infinite loop while unpacking PE files, potentially crashing the scanning engine. The provided sources describe a Denial-of-Service risk due to this loop, with no concrete exploit details or listed...

PT-2022-19289 · F Secure +1 · F-Secure +1

Name of the Vulnerable Software and Affected Versions: F-Secure and WithSecure products affected versions not specified Description: A Denial-of-Service issue was found where the aerdl.dll may enter an infinite loop when unpacking PE files, potentially causing the scanning engine to crash...

CVE-2022-28884: Loop with Unreachable Exit Condition

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...

F-Secure Policy Manager Detection (HTTP)

HTTP based detection of F-Secure Policy Manager Server, Proxy and Web Reporting. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2022-36687: Improper Limitation of a Pathname to a Restricted Directory

Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...

Ingredients Stock Management System SQL Injection Vulnerability

Ingredients Stock Management System is an ingredient stock management system by Carlo Montero. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /classes/Master .php?f=deletewaste location has an SQL injection issue with the id parameter. No...

PT-2022-23552

Name of the Vulnerable Software and Affected Versions Simple Task Scheduling System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete payment" endpoint. Recommendations For...

PT-2022-23842

Name of the Vulnerable Software and Affected Versions Online Diagnostic Lab Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the dob parameter in the "/classes/Users.php?f=save client" API endpoint...

CVE-2022-36678: Improper Neutralization of Special Elements used in an SQL Command

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...

CVE-2022-36681: Improper Neutralization of Special Elements used in an SQL Command

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteaccount...

PT-2022-23560

Name of the Vulnerable Software and Affected Versions Ingredients Stock Management System version 1.0 Description A SQL injection issue was found in the system, specifically via the id parameter at the "/classes/Master.php?f=delete item" endpoint. This allows for potential exploitation...

PT-2022-23563

Name of the Vulnerable Software and Affected Versions Ingredients Stock Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete waste" API endpoint. Recommendatio...

CVE-2022-36696: Improper Neutralization of Special Elements used in an SQL Command

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletestockout...

CVE-2022-36693: Improper Neutralization of Special Elements used in an SQL Command

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteitem...

CVE-2022-28883

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible scanning engine crash. The exploit can be triggered remotely by an attacker...

CVE-2022-28882

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker...

CVE-2022-28883

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible scanning engine crash. The exploit can be triggered remotely by an attacker...

CVE-2022-28882

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker...

Denial of service

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker...