Sql injection

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

CVE-2022-41217

creationtimestamp| type| source ---|---|--- 2023-02-22 18:22:38+00:00| seen| https://t.me/cibsecurity/58684 2025-01-09 08:14:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/907...

CVE-2021-23947

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none...

CVE-2023-0936

A vulnerability was found in TP-Link Archer C50 V2160801. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation leads to denial of service. The attack can only be initiated within the local network. The...

Cross site scripting

A vulnerability, which was classified as problematic, was found in generator-hottowel 0.0.11. Affected is an unknown function of the file app/templates/src/server/app.js of the component 404 Error Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotel...

CVE-2023-0913

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability affects unknown code of the file /adms/admin/?page=vehicles/sellvehicle. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...

CVE-2022-45586

creationtimestamp| type| source ---|---|--- 2023-02-15 20:49:41+00:00| seen| https://t.me/cibsecurity/58252 2023-12-06 17:38:49+00:00| seen| https://t.me/arpsyndicate/1519 2025-03-19 18:19:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8114...

CVE-2023-25192

creationtimestamp| type| source ---|---|--- 2023-02-15 18:47:13+00:00| seen| https://t.me/cibsecurity/58240...

CVE-2023-25762

creationtimestamp| type| source ---|---|--- 2023-02-15 16:36:34+00:00| seen| https://t.me/cibsecurity/58227...

CVE-2022-45154

creationtimestamp| type| source ---|---|--- 2023-02-15 12:41:19+00:00| seen| https://t.me/cibsecurity/58219 2025-03-18 19:48:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7983...

SUSE CVE-2012-2826

Google Chrome before 20.0.1132.43 does not properly implement texture conversion, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

SUSE CVE-2012-4225

NVIDIA UNIX graphics driver before 295.71 and before 304.32 allows local users to write to arbitrary physical memory locations and gain privileges by modifying the VGA window using /dev/nvidia0...

SUSE CVE-2013-5001

Cross-site scripting XSS vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin.class.php in phpMyAdmin 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted object name associated with a...

SUSE CVE-2014-0417

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

SUSE CVE-2018-4438

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9...

SUSE CVE-2018-5113

The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox 58...

SUSE CVE-2019-19060

A memory leak in the adisupdatescanmode function in drivers/iio/imu/adisbuffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service memory consumption, aka CID-ab612b1daf41...

SUSE CVE-2022-1972

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2078. Reason: This candidate is a reservation duplicate of CVE-2022-2078. Notes: All CVE users should reference CVE-2022-2078 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

SUSE CVE-2022-3633

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939sessiondestroy of the file net/can/j1939/transport.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is...

SUSE CVE-2022-4065

A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to...