6115 matches found
CVE-2022-23364
HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php...
CVE-2022-23363
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via index.php...
CVE-2022-23365
HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...
CVE-2021-40595
SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...
CVE-2021-46308
An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter...
Sourcecodester Online Resort Management System SQL注入漏洞
Sourcecodester Online Resort Management System is an open source web-based application that provides online room reservations and can also be used as a simple website for resorts. sourcecodester Online Resort Management System in version v1.0 A SQL injection vulnerability exists, which stems from...
Platinum UPnP SDK 路径遍历漏洞
The Platinum UPnP SDK is a cross-platform C++ library that is primarily used to build DLNA/UPnP control points. The Platinum Upnp SDK suffers from a path traversal vulnerability that stems from Platinum Upnp SDK 1.2.0 having a directory traversal vulnerability. The attack can be exploited by...
GPAC 代码问题漏洞
GPAC is an open source multimedia framework. v1.1.0 of GPAC contains a security vulnerability that can be exploited by attackers to perform denial of service DoS attacks...
PT-2022-1533
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.24 through 5.16.11 Linux Kernel versions 5.15.0 through 5.15.25 Linux Kernel versions 5.10.0 through 5.10.96 Linux Kernel versions 5.4.0 through 5.4.176 Linux Kernel versions 4.19.0 through 4.19.228 Linux Kernel...
kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout
A use-after-free flaw was found in cgroup1parseparam in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service ...
DEBIAN-CVE-2022-23302
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBindingName...
UBUNTU-CVE-2022-23302
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBindingName...
UBUNTU-CVE-2022-23307
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...
China Mobile An Lianbao WF-1 router 命令注入漏洞
China Mobile An Lianbao WF-1 router is a router from China Mobile China. A security vulnerability in China Mobile An Lianbao WF-1 router V1.0.1 can be exploited by an attacker to execute remote commands...
CVE-2022-23094
Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6...
UBUNTU-CVE-2022-23094
Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6...
Libreswan 代码问题漏洞
Libreswan is an IPsec implementation similar to Openswan, which is mainly used to ensure security, integrity issues in data transmission. libreswan has a code issue vulnerability that can be exploited by an attacker to send specially crafted IKEv1 packets to an application, triggering a logging...
Online Thesis Archiving System SQL注入漏洞
Online Thesis Archiving System is Sourcecodester open source provides an online platform to store students' theses or capstone projects. sourcecodester Online Thesis Archiving System is vulnerable to SQL injection in v1.0, which stems from a lack of validation of externally entered SQL statements...