3507 matches found
CVE-2017-18287
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST usersearch parameter...
CVE-2017-18290
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sortdirection parameter...
CVE-2017-18289
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter...
CVE-2017-18288
The CVE-2017-18288 issue affects PvPGN Stats 2.4.6. A SQL injection exists in ladder/stats.php via the GET game parameter, due to insufficient input filtering in the code. This can allow an attacker to manipulate database queries, potentially accessing sensitive data. The connected Red Hat and CN...
CVE-2017-18290
CVE-2017-18290 affects PvPGN Stats 2.4.6. A SQL injection flaw exists in ladder/stats.php exploitable via the GET sort_direction parameter, enabling access to the PvPGN database (including emails, usernames, and passwords per CNVD). CVSS: 2.0/3.0 indicate high/critical impact on confidentiality, ...
CVE-2017-18291
The CVE-2017-18291 issue affects PvPGN Stats 2.4.6, where the ladder/stats.php script is vulnerable to SQL injection via the GET parameter user due to failure to filter database queries. This vulnerability can lead to unauthorized access to the PvPGN database (including email, username and passwo...
CVE-2017-18289
PvPGN Stats 2.4.6 contains an SQL injection in ladder/stats.php triggered by an unsafely handled GET type parameter. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE listing) as a SQL injection that could allow remote attackers to access the PvPGN database, potentially exp...
CVE-2017-18287: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST usersearch parameter...
CVE-2017-18288: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter...
CVE-2017-18291: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter...
CVE-2017-18290: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sortdirection parameter...
CVE-2017-18289: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter...
OracleVM 3.3 / 3.4 : procps (OVMSA-2018-0226)
The remote OracleVM system is missing necessary patches to address critical security updates : - vmstat: fix invalid CPU utilization stats after vCPU hot-plug/unplug Konrad Rzeszutek Wilk bug 18011019 - drop leftover assignment in fix for CVE-2018-1124 causing a severe regression - Resolves:...
Multiple Vulnerabilities in Jenkins Global Build Stats Plugin
Jenkins is an open source automation server.Jenkins provides a number of plug-ins that support building, deploying and automating projects.Global Build Stats is one of the plug-ins that allows to collect and display global build results statistics. The Jenkins Global Build Stats plugin has multip...
Multiple vulnerabilities in Jenkins Global Build Stats plugin (CNVD-2018-15256)
Jenkins is the open source automation server.Jenkins provides numerous plug-ins that support building, deploying, and automating projects.Global Build is a plug-in that allows two different geographically located Jenkins to automatically trigger each other to work. The Jenkins Global Build Stats...
The vulnerability of the `wma_unified_link_peer_stats_event_handler` function in the Android WLAN operating system component from the CAF repository allows a perpetrator to execute arbitrary code.
The vulnerability of the wmaunifiedlinkpeerstatseventhandler function in the Android WLAN operating system from the CAF repository is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of a privileged process, using a...
Node.js third-party modules: [git-dummy-commit] Command injection on the msg parameter
Hi there, I've found a Command Injection on the "git-dummy-commit" module. Module module name: git-dummy-commit version: 1.3.0 npm page: https://www.npmjs.com/package/git-dummy-commit Module Description Create a dummy commit for testing Module Stats 62 downloads in the last day 94 downloads in th...
CVE-2017-9838
Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting XSS vulnerabilities in versions before 5.0.4: index.php leftmenu parameter, core/ajax/box.php PATHINFO, product/stats/card.php type parameter, holiday/list.php monthcreate, monthstart, and monthend parameters, and don/card.ph...
