CVE-2022-38695

In BootRom, there's a possible unchecked command index. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38695

In BootRom, there's a possible unchecked command index. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38695

In BootRom, there's a possible unchecked command index. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38695

CVE-2022-38695 concerns an unchecked command index in BootRom, enabling local privilege escalation without additional execution privileges. The Red Hat, NVD, CVE/CVEList and related feeds consistently describe the issue as affecting BootRom on UNISOC chipsets, with the impact described as local p...

CVE-2025-9761

A security vulnerability has been detected in Campcodes Online Feeds Product Inventory System 1.0. This vulnerability affects unknown code of the file /feeds/index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. T...

CVE-2025-9755

A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24. This affects an unknown function of the file /index.php. The manipulation of the argument msg leads to cross site scripting. Remote exploitation of the attack is possible. The...

CVE-2025-9755

A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24. This affects an unknown function of the file /index.php. The manipulation of the argument msg leads to cross site scripting. Remote exploitation of the attack is possible. The...

CVE-2025-9755

Khanakag-17 Library Management System (up to the latest known build) contains a cross-site scripting (XSS) vulnerability in /index.php caused by improper handling of the msg parameter. Exploitation is possible remotely and the exploit has been disclosed publicly. The public documents do not provi...

CVE-2025-9755 Khanakag-17 Library Management System index.php cross site scripting

A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24. This affects an unknown function of the file /index.php. The manipulation of the argument msg leads to cross site scripting. Remote exploitation of the attack is possible. The...

PT-2025-35448

Name of the Vulnerable Software and Affected Versions: Campcodes Online Feeds Product Inventory System version 1.0 Description: A security vulnerability exists in Campcodes Online Feeds Product Inventory System 1.0. The vulnerability affects unknown code within the /feeds/index.php file of the...

PT-2025-35465

Name of the Vulnerable Software and Affected Versions: BootRom affected versions not specified Description: The BootRom software contains an unchecked command index issue. This could lead to local escalation of privilege without requiring additional execution privileges. Recommendations: At the...

Library Management System 安全漏洞

Library Management System is a library management system with QR code for attendance and automatic generation of library cards by King Albaracin Individual Developer. A security vulnerability exists in Library Management System, which is a result of cross-site scripting due to an incorrect...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from an unchecked command index, which could lead to local elevation of privilege...

Linux Distros Unpatched Vulnerability : CVE-2022-23708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in Elasticsearch 7.17.0's upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the...

AlmaLinux 8 : python39:3.9 (ALSA-2025:14900)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:14900 advisory. setuptools: Path Traversal Vulnerability in setuptools PackageIndex CVE-2025-47273 cpython: Cpython infinite loop when parsing a tarfile CVE-2025-8194...

CampCodes Online Feeds Product Inventory System 安全漏洞

CampCodes Online Feeds Product Inventory System is an online feeds product inventory system from CampCodes Philippines. A security vulnerability exists in CampCodes Online Feeds Product Inventory System version 1.0, which originates from a SQL injection due to incorrect manipulation of the...

CVE-2025-9602

A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

CVE-2025-56214

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username parameter...

CVE-2025-50985

diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site scripting XSS flaws in its web interface. Unsanitized GET parameters including maxage, maxindex, index, path, q query, and doctype are directly echoed into the HTML response, allowing attackers to inject and...

CVE-2025-50986

diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting XSS vulnerabilities in its administrative settings interface. Various configuration fields such as ESHOST, ESINDEXREFRESH, ESPORT, ESSCROLLSIZE, ESTRANSLOGSIZE, ESTRANSLOGSYNCINT, EXCLUDESFILES, FILETYPES,...