521 matches found
UBUNTU-CVE-2022-20474
In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2022-20474
CVE-2022-20474 affects Android (10–13) and is due to a flaw in Parcel.readLazyValue in Parcel.java that can load arbitrary code into the System Settings app via a confused deputy. The vulnerability enables local privilege escalation without extra execution privileges and does not require user int...
PT-2022-14692 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: In the readLazyValue function of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation...
CVE-2022-45009
Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leavesystem/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
Online Leave Management System 代码问题漏洞
Sourcecodester Online Leave Management System is an online leave management system. A security vulnerability exists in Online Leave Management System v1.0, which originates from a file upload vulnerability found in /leavesystem/classes/SystemSettings.php?f=updatesettings. An attacker could exploi...
PT-2022-27364 · Unknown · Online Leave Management System
Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability at the "/leave system/classes/SystemSettings.php?f=update...
CVE-2022-45562
Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high...
PT-2022-27575 · Telos Alliance · Telos Alliance Omnia Mpx Node
Name of the Vulnerable Software and Affected Versions: Telos Alliance Omnia MPX Node versions 1.0.0 through 1.4.9 Description: The issue allows attackers to manipulate and access system settings using a backdoor account with low privilege. This can lead to changes in hardware settings and the...
CVE-2022-45562
The CVE-2022-45562 entry affects Telos Alliance Omnia MPX Node versions 1.0.0 through 1.4.9. A vulnerability from insecure permissions allows an attacker with backdoor low privilege to manipulate and access system settings, potentially changing hardware settings and executing arbitrary commands i...
CVE-2022-38247
Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the System Settings page under the Admin panel...
CVE-2022-38247
Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the System Settings page under the Admin panel...
CVE-2022-38247
Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the System Settings page under the Admin panel...
CVE-2022-38247
Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the System Settings page under the Admin panel...
CVE-2022-38247
Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the System Settings page under the Admin panel...
Cross site scripting
Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the System Settings page under the Admin panel...
UBUNTU-CVE-2022-38247
Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the System Settings page under the Admin panel...
CVE-2022-38247
Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the System Settings page under the Admin panel...
EUVD-2022-40839
Nagios XI v5.8.6 was discovered to contain a cross-site scripting XSS vulnerability via the System Settings page under the Admin panel...
CVE-2022-38247
Nagios XI v5.8.6 is affected by a cross-site scripting (XSS) vulnerability exposed via the Admin panel System Settings page (CVE-2022-38247). The CVE entry notes a medium impact (CVSS 3.1: 4.8) with no exploitation details provided in the primary description. Several connected sources corroborate...
Nagios XI 跨站脚本漏洞
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI version v5.8.6, which stems from the discovery of a cross-site...