PT-2022-27688 · Unknown · Retra-System

Name of the Vulnerable Software and Affected Versions: retra-system affected versions not specified Description: A vulnerability was found in the system, classified as problematic, affecting an unknown function. The manipulation leads to cross site scripting and can be launched remotely...

Multiple vulnerabilities in DENSHI NYUSATSU CORE SYSTEM

Overview DENSHI NYUSATSU CORE SYSTEM provided by Japan Construction Information Center contains multiple vulnerabilities listed below. Cross-site scripting vulnerability CWE-79 - CVE-2022-41993 Cross-site scripting vulnerability CWE-79 - CVE-2022-46287 Open redirect vulnerability CWE-601 -...

Contec CONPROSYS HMI System 安全漏洞

Contec CONPROSYS HMI System is an HTML5 technology-based HMI Human Machine Interface/SCADA Supervisory Control and Data Acquisition software product from Contec Japan. A security vulnerability exists in CONPROSYS HMI System CHS, which originates from improper access control, and can be exploited ...

Apple iOS 安全漏洞

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple iOS and macOS. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's bulletin...

Apple iOS 竞争条件问题漏洞

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple iOS and macOS. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's bulletin...

CVE-2022-2807 SQL Injection in Prens Student Information System

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects Prens Student Information System: before 2.1.11...

CVE-2022-44399

Poultry Farm Management System v1.0 contains a SQL injection vulnerability via the del parameter at /Redcock-Farm/farm/category.php...

PT-2022-27215 · Unknown · Web Based Quiz System

Name of the Vulnerable Software and Affected Versions: Web Based Quiz System version 1.0 Description: The issue allows attackers to obtain users' passwords via a bruteforce attack because the system transmits user passwords in plaintext during the authentication process. Recommendations: For Web...

The vulnerability of the Windows DWM Core Library on Windows operating systems, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Windows DWM Core Library in operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-34354 IBM Sterling Partner Engagement Manager information disclosure

IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424...

The vulnerability of the proprietary file system Windows Extensible File Allocation Table in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the proprietary file system, Windows Extensible File Allocation Table, in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows Secure Channel component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the Windows Secure Channel component of the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Human Resource Management System 跨站脚本漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System v1.0, which stems from its /hrm/index.php?msg component that allows attackers to execute arbitrary web script or HTML usi...

Online Tours & Travels Management System 代码问题漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A security vulnerability exists in Online Tours & Travels Management System v1.0, which originates from an arbitrary file upload vulnerability contained in the component...

USN-5711-1 ntfs-3g vulnerability

Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A local attacker could possibly use this issue to gain privileges...

The vulnerability of the NTFS-3G driver set-up, which is implemented in the NTFS file system, allows a perpetrator to execute arbitrary code.

The vulnerability of the NTFS-3G driver set-up of the NTFS file system is related to errors in metadata processing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Zephyr 资源管理错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr version 3.1 and earlier versions. An attacker exploited the vulnerability to trigger a denial-of-service exploit...

Google Chrome Vulkan buffer overflow vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that could be exploited by attackers to overflow a buffer and execute arbitrary code on the system or cause the application to crash...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and iPadOS, which stems from a shortcut that may be able to check...

CVE-2022-39057 Changing Information Technology Inc. RAVA certificate validation system - Command Injection

RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege can exploit this vulnerability to perform arbitrary system command and disrupt service...