5201 matches found
CVE-2022-24697
Kylin's cube designer function has a command injection vulnerability when overwriting system parameters in the configuration overwrites menu. RCE can be implemented by closing the single quotation marks around the parameter value of â-- conf=â to inject any operating system command into the comma...
August 9, 2022âKB5016629 (OS Build 22000.856)
August 9, 2022âKB5016629 OS Build 22000.856 Applies To Windows 11 Note NEW 8/26/22 IMPORTANT Microsoft released KB5012170 on August 9, 2022. It provides support for Secure Boot Forbidden Signature Database DBX. This is a standalone, security update. Windows 8.1 and newer clients and Windows Serve...
CVE-2022-39264
nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets, which could lead to man-in-the-middle attacks. Users can upgrade to version 0.10.2 to protect against this issue. As a workaround, one may apply th...
Cross site request forgery (csrf)
nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets, which could lead to man-in-the-middle attacks. Users can upgrade to version 0.10.2 to protect against this issue. As a workaround, one may apply th...
CVE-2022-39264 nheko vulnerable to secret poisoning using MITM on secret requests by the homeserver
nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets, which could lead to man-in-the-middle attacks. Users can upgrade to version 0.10.2 to protect against this issue. As a workaround, one may apply th...
CVE-2022-39264
nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets, which could lead to man-in-the-middle attacks. Users can upgrade to version 0.10.2 to protect against this issue. As a workaround, one may apply th...
CVE-2022-40337
OASES aka Open Aviation Strategic Engineering System 8.8.0.2 allows attackers to execute arbitrary code via the Open Print Folder menu...
PT-2022-25352
Name of the Vulnerable Software and Affected Versions OASES aka Open Aviation Strategic Engineering System version 8.8.0.2 Description The issue allows attackers to execute arbitrary code via the Open Print Folder menu. Recommendations For OASES aka Open Aviation Strategic Engineering System...
Open Aviation Strategic Engineering System security vulnerabilities
Valsoft Open Aviation Strategic Engineering System OASES is an aviation engineering and maintenance system from Valsoft Corporation of Canada. A security vulnerability exists in Open Aviation Strategic Engineering System version 8.8.0.2 that could allow an attacker to execute arbitrary code via t...
JFinal SQL Injection Vulnerability
JFinal is a Java language based WEB + ORM open source framework. JFinal CMS 5.1.0 SQL injection vulnerability exists , the vulnerability stems from the id, name, menu key interface does not use the same components , there is no filter , but each uses its own SQL connection , resulting in SQL...
CVE-2022-38285
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list...
CVE-2022-38285
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list...
CVE-2022-38285
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list...
CVE-2022-38285
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list...
CVE-2022-38285
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list...
JFinal SQL Injection Vulnerability
JFinal is a Java-based WEB + ORM open source framework. JFinal CMS version 5.1.0 has a security vulnerability , the vulnerability stems from /system/menu/list SQL injection vulnerability...
CVE-2022-38285: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list...
SUSE SLES15 Security Update : python-pyxdg (SUSE-SU-2022:2997-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2997-1 advisory. - CVE-2019-12761: Fixed a code injection issue in Category elements of a Menu XML bsc1137627. Tenable has extracted the preceding descriptio...
SUSE-SU-2022:2997-1 Security update for python-pyxdg
This update for python-pyxdg fixes the following issues: - CVE-2019-12761: Fixed a code injection issue in Category elements of a Menu XML bsc1137627...