8751 matches found
CVE-2018-18803
Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb...
Lock-Screen Bypass Bug Quietly Patched in Handsets
A design flaw affecting all in-display fingerprint sensors – that left over a half-dozen cellphone models vulnerable to a trivial lock-screen bypass attack – has been quietly patched. The flaw was tied to a bug in the popular in-display fingerprint reader technology used for user authentication...
CVE-2018-18803: Improper Neutralization of Special Elements used in an SQL Command
Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb...
PT-2018-14665
Name of the Vulnerable Software and Affected Versions Bakeshop Inventory System version 1.0 Description The issue is related to SQL injection via the login screen. It is connected to the include/publicfunction.vb file. Recommendations For Bakeshop Inventory System version 1.0, consider restrictin...
CVE-2018-18806: Improper Neutralization of Special Elements used in an SQL Command
School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...
CVE-2018-18804: Improper Neutralization of Special Elements used in an SQL Command
Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...
CVE-2018-18805: Improper Neutralization of Special Elements used in an SQL Command
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...
Denial of Service Vulnerability in Jiangmin Optimization Expert 4WfpNetLimiter.sys Driver
Jiangmin Optimization Expert is a completely free computer optimization software that is purely a tool. A denial of service vulnerability exists in the JM Optimization Expert 4WfpNetLimiter.sys driver. An attacker can cause a denial of service attack by sending a 0x00222408 request using the...
Denial of Service Vulnerability in KsysCall.sys Driver of JM Firewall (CNVD-2018-26069)
Jiangmin Firewall is a network security protection tool designed to address the safety of individual users on the Internet, the product incorporates advanced network access dynamic monitoring technology to thoroughly solve the invasion of hacker attacks, Trojan horse programs and Internet viruses...
Denial of Service Vulnerability in JM Firewall KsysCall.sys Driver (CNVD-2018-26065)
Jiangmin Firewall is a network security protection tool designed to address the safety of individual users on the Internet, the product incorporates advanced network access dynamic monitoring technology to thoroughly solve the invasion of hacker attacks, Trojan horse programs and Internet viruses...
Design/Logic Flaw
Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...
CVE-2018-17476
Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...
CVE-2018-17471
Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...
CVE-2018-17471
Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...
CVE-2018-17476
Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...
CVE-2018-17471
Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...
CVE-2018-17476
Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...
CVE-2018-17471
Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...
