CVE-2021-427171

The connected CNNVD entry links CVE-2021-427171 to a vulnerability in ModSecurity used with NGINX, where the ModSecurity JSON parser can be triggered by specially formatted JSON messages, causing high resource utilization and a potential denial of service. Affected component: ModSecurity WAF inte...

CVE-2022-25019

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-38602. Reason: This candidate is a reservation duplicate of CVE-2021-38602. Notes: All CVE users should reference CVE-2021-38602 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2022-25019

CVE-2022-25019 is rejected/not used and does not represent an active vulnerability entry.

CVE-2020-6930

CVE-2020-6930 entry is linked to a concrete HP Sure Sense elevation of privilege issue (HP PSRT HPSBHF03711 rev. 3). HP identifies a potential vulnerability in Sure Sense that could allow elevation of privilege; HP has released mitigations via updates/SoftPaqs with minimum versions for affected p...

CVE-2016-1000238

The CVE-2016-1000238 entry is linked to node-krb5 SPOOFING via unvalidated KDC. Affected: node-krb5 (Node.js module). Issue: KDC is not validated before authentication, allowing a network-attacker with time and access to spoof the KDC and impersonate a valid user without credentials. Impact: pote...

GSD-2022-1000254 i40e: Fix queues reservation for XDP

i40e: Fix queues reservation for XDP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit 00eddb0e4ea115154581d1049507a996acfc2d3e...

GSD-2022-1000193 i40e: Fix queues reservation for XDP

i40e: Fix queues reservation for XDP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.96 by commit 768eb705e6381f0c70ca29d4e66f19790d5d19a1...

PT-2022-28431

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.12 through v5.4.175 Description The issue concerns a problem with queues reservation for XDP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v3.12 through...

PT-2022-28532

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.12 through v5.15.18 Description The issue is related to queues reservation for XDP in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v3.12...

PT-2022-28471

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.96 Description The issue is related to queues reservation for XDP in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-28402

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.228 Description The issue concerns a problem with queues reservation for XDP in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

CVE-2021-3648

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3530. Reason: This candidate is a reservation duplicate of CVE-2021-3530. Notes: All CVE users should reference CVE-2021-3530 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Cross-site Scripting (XSS) - Reflected in effgarces/bookedscheduler

Setup the Booked Scheduler locally.URL like the following. http://192.168.5.5/phpsch/ Attcker 2. Login as valid user. 3. Make an reservation from the dashboard. 4. Open the information you reserved.URL like the following http://192.168.5.5/Web/reservation.php?rn=62020af2eee4d833634703 5. The...

CVE-2021-3534

CVE-2021-3534 is rejected and not a valid vulnerability entry; reference CVE-2021-34981.

MartDevelopers iResturant SQL Injection Vulnerability (CNVD-2022-91165)

MartDevelopers Iresturant is an open source lightweight restaurant Erp from MartDevelopers Kenya. used to integrate social restaurant operations into one system. a SQL injection vulnerability exists in MartDevelopers iResturant v1.0, which stems from adding this when viewing a reservation view...

Cross-site Scripting (XSS) - DOM in tastyigniter/tastyigniter

Description TastyIgniter provides a professional and reliable platform for restaurants wanting to offer online food ordering and table reservation to their customers. this is vulnerable for stored xss Proof of Concept Impact This vulnerability is capable of Stored XSS...

CVE-2021-45803

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because this view parameter value is added to the SQL query without additional verification when viewing reservation...

CVE-2021-45803

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because this view parameter value is added to the SQL query without additional verification when viewing reservation...