PT-2022-19275 · F Secure · F-Secure Atlant

Name of the Vulnerable Software and Affected Versions: F-Secure Atlant affected versions not specified Description: A Denial-of-Service DoS issue was discovered in the fsicapd component used in certain F-Secure products. When scanning larger packages or fuzzed files, the component consumes too mu...

CVE-2022-28871: Allocation of Resources Without Limits or Throttling

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacke...

PT-2022-19006

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the "/hocms/classes/Master.php?f=delete member" API...

CVE-2022-28414: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...

CVE-2022-28029: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...

CVE-2022-28417: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

PT-2022-19008

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically...

PT-2022-19009

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically...

PT-2022-18768

Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description A SQL injection issue was found in the Simple Real Estate Portal System. The vulnerability can be exploited via the /reps/classes/Master.php API endpoint, specifically when the f paramet...

PT-2022-18762

Name of the Vulnerable Software and Affected Versions Purchase Order Management System version 1.0 Description A SQL injection issue was found in the Purchase Order Management System. The vulnerability can be exploited via the /purchase order/classes/Master.php API endpoint, specifically through...

PT-2022-18770

Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description A SQL injection issue was found in the Simple Real Estate Portal System. The issue is related to the "/reps/classes/Master.php?f=delete estate" API endpoint. Recommendations For Simple...

PT-2022-18767

Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/reps/classes/Master.php?f=delete amenity" API endpoint. Recommendations For Simple Real Estate Portal...

PT-2022-19004

Name of the Vulnerable Software and Affected Versions Car Driving School Managment System version 1.0 Description A SQL injection issue was found in the Car Driving School Managment System. The vulnerability can be exploited via the /cdsms/classes/Master.php API endpoint, specifically when the f...

PT-2022-19002

Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description A SQL injection issue was found in the Simple Real Estate Portal System. The vulnerability can be exploited via the /reps/classes/Users.php API endpoint, specifically when the f paramete...

PT-2022-19005

Name of the Vulnerable Software and Affected Versions Car Driving School Management System version 1.0 Description A SQL injection issue was found in the Car Driving School Management System. The vulnerability can be exploited via the /cdsms/classes/Master.php API endpoint, specifically through t...

PT-2022-19007

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically...

PT-2022-18763

Name of the Vulnerable Software and Affected Versions Purchase Order Management System version 1.0 Description A SQL injection issue was found in the Purchase Order Management System. The vulnerability can be exploited via the /purchase order/classes/Master.php API endpoint, specifically when the...

UBUNTU-CVE-2021-44492

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...

CVE-2022-28870

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails...

CVE-2022-28869

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the browser did not show full URL, such as port number...