190 matches found
Dcastalia CMS 1.2 Insecure Direct Object Reference
==================================================================================================================================== | Title : Dcastalia CMS v1.2 Unauthorized administrative access Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...
CVE-2021-39473
Saibamen HotelManager v1.2 is vulnerable to Cross Site Scripting XSS due to improper sanitization of comment and contact fields...
CVE-2021-39473
CVE-2021-39473 affects Saibamen HotelManager v1.2. The vulnerability is an XSS flaw caused by improper sanitization of the comment and contact fields within the web application. The issue is documented across multiple sources in the connected data, consistently describing a client-side/HTML conte...
Exploit for Out-of-bounds Write in Openssl
Detection for CVE-2022-3602 - OpenSSL RCE/DOC v3.0.0 - v3.0.6...
CVE-2021-38217
SEMCMS 1.2 is affected by a SQL Injection vulnerability in SEMCMS_User.php. The issue, documented across multiple sources (CVE-2021-38217), is classified with CVSSv3.1 base score 9.8 (CRITICAL) and is exploitable remotely without privileges or user interaction. The vulnerability stems from input ...
CVE-2022-34568
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDLx11yuv.c...
CVE-2022-34568
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDLx11yuv.c...
Double free
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDLx11yuv.c...
CVE-2022-34568
CVE-2022-34568 affects SDL 1.2 with a use-after-free in the XFree path (src/video/x11/SDL_x11yuv.c). Exploitation could crash the application; impact includes availability (per CVSS: HIGH) with network access and no user interaction required. Connected advisories corroborate SDL vulnerabilities i...
CVE-2022-34568
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDLx11yuv.c...
CVE-2022-34568
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDLx11yuv.c...
Security Bulletin: A security vulnerability in log4j v1.2 affects IBM Cloud Pak for Multicloud Management Infrastructure Management Appliance
Summary A security vulnerability in log4j v1.2 affects IBM Cloud Pak for Multicloud Management Infrastructure Management Appliance. The fix removes Apache Log4j. Vulnerability Details CVEID:CVE-2021-4104 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the...
DouPHP 1.2 Release 20141027 SQL Injection
==================================================================================================================================== | Title : DouPHP v1.2 Release 20141027 SQL Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...
Design/Logic Flaw
An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp...
CVE-2022-31287
An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp...
CVE-2022-31287
This CVE concerns Bento4 v1.2, where an allocation size request error exists in the file Ap4RtpAtom.cpp. The connected documents confirm the affected software/component and the underlying issue, but do not provide details on exploit methods, affected versions beyond Bento4 v1.2, or remediation st...
EulerOS 2.0 SP5 : speex (EulerOS-SA-2022-1552)
According to the versions of the speex package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Divide by Zero vulnerability in the function static int readsamples of Speex v1.2 allows attackers to cause a denial of service DoS via a crafte...
Cross site scripting
A cross-site scripting XSS vulnerability in PaquitoSoftware Notimoo v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted title or message in a notification...