CVE-2022-43317

The CVE-2022-43317 entry describes a cross-site scripting (XSS) vulnerability in Human Resource Management System v1.0, specifically targeting the /hrm/index.php?msg endpoint. The underlying issue allows attackers to inject and execute arbitrary web scripts or HTML via a crafted payload. The cons...

CVE-2022-43318

CVE-2022-43318 affects Human Resource Management System v1.0. A SQL injection vulnerability exists via the stateedit parameter on the /hrm/state.php endpoint. Affected component: the /hrm/state.php API handling of the stateedit input. Root cause: improper handling of user-supplied input enabling ...

The platform’s vulnerability related to ensuring security standards for XML Apache Santuario XML Security for Java allows attackers to trigger a service failure.

The vulnerability of the jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java component of the Apache Santuario XML Security for Java platform is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2022-43317

A cross-site scripting XSS vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2022-26844 · Unknown · Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the stateedit parameter at the "/hrm/state.php" API endpoint. There is no information...

CVE-2022-20937

A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine ISE Software could allow an unauthenticated, remote attacker to negatively affect the performance of an affected device. This vulnerability is due to insufficient management of system resources. An attack...

DIPlib 资源管理错误漏洞

DIPlib is a library of DIPlib open source . for quantitative image analysis in C++, MATLAB and Python. A security vulnerability exists in DIPlib version v3.0.0, which stems from a double release...

Cisco Identity Services Engine 资源管理错误漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The ISE collects real-time information about the network, users, and devices to develop and implement policies to monitor the network. A resource management error vulnerability exists in...

Apple tvOS Resource Management Error Vulnerability

Apple tvOS is a smart TV operating system from Apple, Inc. Apple tvOS has a security vulnerability that originates from post-release reuse and can be exploited by attackers to execute arbitrary code with kernel privileges...

Bento4 资源管理错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. Bento4 suffers from a resource management error vulnerability that stems from the component not completing a fix for some unknown functionality of CVE-2019-13238, resulting in resource consumption...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. An attacker exploits this vulnerability to force the reuse of a freed memory region via grusetcontextoption to trigger a...

Apple tvOS 资源管理错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. Apple tvOS has a security vulnerability that originates from post-release reuse and can be exploited by attackers to execute arbitrary code with kernel privileges...

The vulnerability of the Window.print() function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to trigger a service failure.

The vulnerability of the Window.print function in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions through a specially created malicious website...

Nextcloud 资源管理错误漏洞

Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud Germany. A security vulnerability exists in Nextcloud Server, Nextccloud Enterprise Server versions prior to 24.0.6. An attacker exploited the vulnerability to cause...

Vim 资源管理错误漏洞

Vim is a cross-platform text editor. A resource management error vulnerability exists in Vim that stems from a memory reuse after release issue...

Bento4 资源管理错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. Axiomatic Bento4 suffers from a resource management error vulnerability that stems from the presence of a memory reuse after release issue...

Bento4 资源管理错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. Bento4 suffers from a resource management error vulnerability that stems from the presence of a memory reuse after release issue...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which is caused by post-release usage in Layout. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service on the system...

ARM Mali GPU Kernel Driver 资源管理错误漏洞

The ARM Mali GPU Kernel Driver is a driver for a graphics processor unit from ARM UK. The ARM Mali GPU Kernel Driver suffers from a resource management error vulnerability that originates from allowing an unprivileged user to perform improper GPU processing operations to gain access to freed memo...

Linux kernel resource management error vulnerability (CNVD-2022-72085)

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a security vulnerability that affects the function mtkppe checkskb in the component Ethernet handler file drivers/net/ethernet/mediatek/mtkppe.c. Operation leads to free post-use...