7331 matches found
MiniTool Partition Wizard Elevation of Privilege Vulnerability
MiniTool Partition Wizard is a partition manager for home and home office users from MiniTool Canada. v12.0 of MiniTool Partition Wizard contains an elevation of privilege vulnerability that stems from the application containing an unreferenced service path. An attacker could exploit this...
Home Clean Services Management System 代码问题漏洞
A remote code execution vulnerability exists in Home Clean Services Management System version 1.0, which originates from register.php?link=registerand fails to properly filter the special elements of the construction snippet. An attacker could exploit this vulnerability to cause arbitrary code...
CVE-2022-31489
Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutiolanguage cookie SQL injection...
CVE-2022-27094
Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...
CVE-2022-27094
Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...
CVE-2022-27094
Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...
Code injection
Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...
CVE-2022-27094
CVE-2022-27094 affects Sony PlayMemories Home v6.0. The vulnerability is an unquoted service path used by a Windows service, enabling local privilege escalation to SYSTEM. Documented impact is high for confidentiality, integrity, and availability, with CVSS v3.1 metrics (LOCAL access, LOW attack ...
CVE-2022-27094
Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...
Sony PlayMemories Home 代码问题漏洞
Sony PlayMemories Home is an image management software from Sony Japan. It is capable of managing and editing photos and videos on a PC. A security vulnerability exists in Sony PlayMemories Home version v6.0, which stems from the inclusion of an unreferenced service path that allows an attacker t...
gradle: information disclosure through temporary directory permissions
In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. Some builds could be vulnerable to a local information disclosure. Remote files accessed through TextResourceFactory are downloaded...
CVE-2022-30052
In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...
CVE-2022-30052
In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...
CVE-2022-30052
In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...
Sql injection
In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...
CVE-2022-30052
In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...
CVE-2022-30052
CVE-2022-30052 affects Home Clean Service System 1.0. Affected component: password handling parameter; underlying issue is SQL injection in the password field. Documented impact per CVSS: high severity (CVSS v2 base 7.5, CVSS v3.1 base 9.8) with network attack vector, no authentication, and parti...
GHSA-9GGP-5RF4-X7Q9 Fat Free CRM vulnerable to SQL Injection
Multiple SQL injection vulnerabilities in app/controllers/homecontroller.rb in Fat Free CRM before 0.12.1 allow remote authenticated users to execute arbitrary SQL commands via 1 the homepage timeline feature or 2 the activity feature...
Withdrawn Advisory: Home Assistant Frontend XSS Vulnerability
Withdrawn Advisory This advisory has been withdrawn because we cannot confirm home-assistant-frontend is or was ever published to npm. Original Description In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...
GHSA-7WFQ-WMX2-3WR4 Withdrawn Advisory: Home Assistant Frontend XSS Vulnerability
Withdrawn Advisory This advisory has been withdrawn because we cannot confirm home-assistant-frontend is or was ever published to npm. Original Description In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...