ADC-13.0-Issue is with unable to upgrade ADC VPX

During Upgrade of VPX you are faced with error message, "License server version 11.14.0.2 not compatible with client version 11.16.6.0 Either upgrade the ADM to ensure that it is running", during upgrade process...

PT-2022-27310 · Unknown · Appalti & Contratti

Name of the Vulnerable Software and Affected Versions: Appalti & Contratti version 9.12.2 Description: The web application is vulnerable to a Reflected Cross-Site Scripting issue. The idPagina parameter is reflected inside the server response without any HTML encoding, resulting in XSS when the...

EUVD-2022-0019

In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's /login endpoint...

PT-2022-36764 · Git +1 · Opensis

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap buffer overflow error, specifically a READ 1 type crash. The crash occurs in the following functions: parse content length...

CVE-2022-27874

Improper authentication in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access...

Intel PROSet Wireless WiFi Software Advisory - Lenovo Support US

No description provided...

CVE-2022-43995

Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer...

PT-2022-26748 · Unknown · Restaurant Pos System

Name of the Vulnerable Software and Affected Versions: Restaurant POS System version 1.0 Description: The issue is related to a SQL injection vulnerability. It affects the update customer.php file. Recommendations: For Restaurant POS System version 1.0, consider restricting access to the update...

Ultimate Member < 2.5.1 - Admin+ LFI via Traversal

The plugin does not validate and sanitize the pack parameter before using it in an include statement, which could allow high privilege users to perform local file inclusion attacks via a Traversal vector...

CVE-2022-41702

The affected product DIAEnergie versions prior to v1.9.01.002 is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API...

PT-2022-22961 · Sourcecodester · Sourcecodester Cashier Queuing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Cashier Queuing System version 1.0 Description: A critical issue was found in the Login Page component, specifically in the /queuing/login.php file. The manipulation of the username and password arguments leads to SQL injection...

Race condition

HIWIN Robot System Software version 3.3.21.9869 does not properly address the terminated command source. As a result, an attacker could craft code to disconnect HRSS and the controller and cause a denial-of-service condition...

OPENSUSE-SU-2022:10151-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 106.0.5249.119 boo1204223: CVE-2022-3445: Use after free in Skia CVE-2022-3446: Heap buffer overflow in WebSQL CVE-2022-3447: Inappropriate implementation in Custom Tabs CVE-2022-3448: Use after free in Permissions API CVE-2022-3449: U...

PT-2022-26056 · Jhead +3 · Jhead +3

Name of the Vulnerable Software and Affected Versions: Jhead version 3.06.0.1 Description: The issue allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option. Recommendations: For Jhead version 3.06.0.1, consider avoiding t...

PT-2022-26231 · Unknown · Online Birth Certificate Management System

Name of the Vulnerable Software and Affected Versions: Online Birth Certificate Management System version 1.0 Description: The issue is related to a persistent Cross Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the system, which will be executed ...

CVE-2022-40475

TOTOLINK A860R V4.1.2cu.5182B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi...

SUSE-SU-2022:3425-1 Security update for grafana

This update for grafana fixes the following issues: Updated to version 7.5.12: - CVE-2021-43813: Fixed markdown path traversal bsc1193688. - CVE-2021-39226: Fixed Snapshot authentication bypass bsc1191454...

CVE-2022-40928

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...

CVE-2022-2315 SQL Injection in Database Accreditation System

Database Software Accreditation Tracking/Presentation Module product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2...

PT-2022-21232 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.4.6 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository ikus060/rdiffweb. This could potentially lead to disabling notifications in a user's profile. Recommendations: For...