1709 matches found
CVE-2019-18387
Sourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the id parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details...
CVE-2019-18387
CVE-2019-18387 affects Sourcecodester Hotel and Lodge Management System 1.0. The vulnerability is an unauthenticated SQL injection exploitable via the id parameter on the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details. The issue enables attackers to execute arbitrary...
CVE-2019-13409
A SQL injection vulnerability was discovered in TOPMeeting before version 8.8 2019/08/19. An attacker can use a union based injection query string though a search meeting room feature to get databases schema and username/password...
Sql injection
A SQL injection vulnerability was discovered in TOPMeeting before version 8.8 2019/08/19. An attacker can use a union based injection query string though a search meeting room feature to get databases schema and username/password...
CVE-2019-13409 A SQL injection vulnerability was discovered in TOPMeeting before version 8.8 (2019/08/19)
A SQL injection vulnerability was discovered in TOPMeeting before version 8.8 2019/08/19. An attacker can use a union based injection query string though a search meeting room feature to get databases schema and username/password...
CVE-2019-2953
Vulnerability in the Oracle Hospitality Cruise Dining Room Management product of Oracle Hospitality Applications component: Web Service. The supported version that is affected is 8.0.80. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2019-2953
Vulnerability in the Oracle Hospitality Cruise Dining Room Management product of Oracle Hospitality Applications component: Web Service. The supported version that is affected is 8.0.80. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
Buffer overflow
Vulnerability in the Oracle Hospitality Cruise Dining Room Management product of Oracle Hospitality Applications component: Web Service. The supported version that is affected is 8.0.80. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2019-2953
CVE-2019-2953 affects Oracle Hospitality Cruise Dining Room Management (Web Service) in Oracle Hospitality Applications, version 8.0.80. A low-privileged attacker with HTTP network access can obtain unauthorized data access and may perform updates/deletes on affected data. CVSS v3.1 base score 7....
Cisco TelePresence CE Software CVE-2019-15962 Local Arbitrary File Write Vulnerability
Description Cisco TelePresence Collaboration Endpoint Software is prone to a local arbitrary file-write vulnerability. Successful exploits may allow an attacker to write arbitrary files on the root directory. This issue is being tracked by Cisco Bug ID CSCvq47315. Technologies Affected Cisco...
Oracle Hospitality Cruise Dining Room Management CVE-2019-2953 Remote Security Vulnerability
Description Oracle Hospitality Cruise Dining Room Management is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. This vulnerability affects the following supported versions: 8.0.80 Technologies Affected Oracle Hospitality Cruise Dining Room...
SQL Injection Vulnerability in Kaixin MRBS Conference Booking System
Qixing Meeting Room Booking System MRBS is a meeting room management software, he can assist enterprises to manage the meeting rooms. A SQL injection vulnerability exists in Qixing MRBS, which can be exploited by attackers to obtain sensitive information from the database...
Fedora 30 : matrix-synapse (2019-80f1943143)
This release includes four security fixes : - Prevent an attack where a federated server could send redactions for arbitrary events in v1 and v2 rooms. - Prevent a denial-of-service attack where cycles of redaction events would make Synapse spin infinitely. - Prevent an attack where users could b...
August 6, 2019, update for Office 2016 (KB4464535)
None None...
FreeBSD : py-matrix-synapse -- multiple vulnerabilities (38d2df4d-b143-11e9-87e7-901b0e934d69)
Matrix developers report : The matrix team releases Synapse 1.2.1 as a critical security update. It contains patches relating to redactions and event federation : - Prevent an attack where a federated server could send redactions for arbitrary events in v1 and v2 rooms. - Prevent a...
py-matrix-synapse -- multiple vulnerabilities
Matrix developers report: The matrix team releases Synapse 1.2.1 as a critical security update. It contains patches relating to redactions and event federation: Prevent an attack where a federated server could send redactions for arbitrary events in v1 and v2 rooms. Prevent a denial-of-service...
AVTECH Software Room Alert 3E Elevation of Privilege Vulnerability
AVTECH Software Room Alert 3E is a device for monitoring the IT infrastructure environment from AVTECH Software, USA. The product is mainly used to monitor temperature, humidity, power, electricity and smoke in computer rooms or small data centers. A security vulnerability exists in AVTECH Softwa...
CVE-2019-13379
On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using the default credentials to get in...
CVE-2019-13379
On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using the default credentials to get in...
Default credentials
On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using the default credentials to get in...