CVE-2022-41011: Buffer Copy without Checking Size of Input

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2007-6078: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 nctop.asp; 2 incbookmarks.asp, possibly involving a parameter passed from cpmain.asp; 3 incprofilefunctions.asp; or 4 incSUBSCRIPTIONS.asp; or the 5...