CVE-2022-38118

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...

CVE-2022-38116

Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt service...

CVE-2022-26527

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

Buffer overflow

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

Sql injection

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...

CVE-2022-38118 HGiga OAKlouds - SQL Injection

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...

CVE-2022-26529 Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for segmented packets’ link parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

CVE-2022-38118

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...

CVE-2022-38116

Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt service...

PT-2022-17424 · Realtek · Realtek Linux/Android Bluetooth Mesh Sdk

Name of the Vulnerable Software and Affected Versions: Realtek Linux/Android Bluetooth Mesh SDK affected versions not specified Description: The issue is due to insufficient validation for broadcast network packet length, leading to a buffer overflow. An unauthenticated attacker in the adjacent...

PT-2022-17921 · Realtek · Realtek Linux/Android Bluetooth Mesh Sdk

Name of the Vulnerable Software and Affected Versions: Realtek Linux/Android Bluetooth Mesh SDK affected versions not specified Description: The issue is due to insufficient validation for segmented packets' link parameter, leading to a buffer overflow. An unauthenticated attacker in the adjacent...

PT-2022-17920 · Realtek · Realtek Linux/Android Bluetooth Mesh Sdk

Name of the Vulnerable Software and Affected Versions: Realtek Linux/Android Bluetooth Mesh SDK affected versions not specified Description: The issue is due to insufficient validation for the length of segmented packets' shift parameter, leading to a buffer overflow. An unauthenticated attacker ...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W allows a perpetrator to execute arbitrary commands or cause service failures.

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W allows a perpetrator to execute arbitrary commands or cause service failures.

The vulnerability of the web-based management interfaces for Cisco Small Business RV110W, RV130, RV130W, and RV215W stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the vulnerable devic...

The vulnerability of the JBIG2Stream::readTextRegionSeg() function (JBIG2Stream.cc) in PDF viewing software like Xpdf allows a malicious actor to cause service interruptions or execute arbitrary code.

The vulnerability of the JBIG2Stream::readTextRegionSeg function JBIG2Stream.cc in PDF viewing software like Xpdf is related to integer overflow. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code using a specially created PDF file...

The vulnerability of the OSPFv3 network protocol implementation in Cisco NX-OS network operating systems allows a attacker to cause a service failure.

The vulnerability of the OSPFv3 network protocol implementation in Cisco NX-Os network operating systems involves a lack of checks for buffer size and reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the HCI interface, which operates on the Modbus TCP protocol, and the programmable logic controllers Hitachi Energy RTU500, allows a intruder to trigger a service failure or cause the device to restart.

The vulnerability of the HCI interface, which operates on the Modbus TCP protocol, and the Hitachi Energy RTU500 programmable logic controllers is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause service failures or trigg...

The vulnerability of the QPDF::processXRefStream function in the command-line utility for converting QPDF documents allows a attacker to cause a service failure.

The vulnerability of the QPDF::processXRefStream command-line utility for converting PDF documents is related to the lack of resource release after the expiration of its useful period. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability in the implementation of the get_charset() function in the FreeType Demo Programs library allows a malicious actor to execute arbitrary code or cause service failures.

The vulnerability in the implementation of the getcharset function in the FreeType Demo Programs library relates to the execution of operations outside the buffer during font processing. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to gain access to modify, add, or delete data, or cause partial service disruption.

The vulnerability of the Core server component of Oracle WebLogic Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to remotely gain access to modify, add, or delete data, or cause a partial service outage using the IIOP and T3...