7582 matches found
CVE-2022-23690
The CVE-2022-23690 entry covers a vulnerability in the web-based management interface of Aruba AOS-CX that allows a remote, unauthenticated attacker to fingerprint the exact AOS-CX version running on a switch, enabling targeted follow-on actions. Affected ArubaOS-CX Switches and versions include ...
PT-2022-16194 · Aruba · Arubaos-Cx Switches
Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.09.1020 and below ArubaOS-CX Switches versions 10.08.1060 and below ArubaOS-CX Switches versions 10.06.0200 and below Description: A vulnerability in the web-based management interface of AOS-CX could allow a...
notrinoserp 安全漏洞
notrinoserp is a web-based ERP by Phương Individual Developer, an accounting system written in PHP and MySql. A security vulnerability exists in versions prior to notrinoserp 0.7, which stems from not requiring users to use strong passwords. An attacker could exploit this vulnerability to...
Student Management System SQL注入漏洞
Student Management System is a simple web-based student management software from Sk.Amir Hamza, an individual developer in Bangladesh. Student Management System suffers from a SQL injection vulnerability that stems from the operation parameter id that causes sql injection...
notrinosrp 跨站脚本漏洞
notrinoserp is a web-based ERP by Phương Individual Developer, an accounting system written in PHP and MySql. A cross-site scripting vulnerability exists in versions prior to notrinosrp 0.7, which originates from cross-site scripting XSS...
Guest Management System 跨站脚本漏洞
Guest Management System is a web-based system designed to monitor the records of everyone entering a school or college. The Guest Management System suffers from a cross-site scripting vulnerability that stems from the manipulation of the parameter name in an unknown portion of its myform.php...
Guest Management System 安全漏洞
Guest Management System is a web-based system designed to monitor the records of everyone entering a school or college. The Guest Management System has a security vulnerability that stems from an unknown function of its code storing user passwords in the database in plaintext...
CVE-2022-20869
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...
CVE-2022-20869
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...
CVE-2022-20869 Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...
CVE-2022-20869
CVE-2022-20869 affects Cisco BroadWorks Application Delivery Platform Software, specifically its web-based management interface. The vulnerability is a cross-site scripting flaw caused by insufficient input validation, allowing an unauthenticated, remote attacker to persuade a user to click a cra...
CVE-2022-20869 Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...
GHSA-J47C-J42C-MWQQ Solana Pay Vulnerable to Weakness in Transfer Validation Logic
Description When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient, using the supplied validateTransfer function. An edge case regarding this mechanism could cause the validation logic to validate multiple...
Cisco Small Business RV Series Routers DoS RCE (cisco-sa-sb-mult-vuln-CbVp4SUR))
According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by a vulnerability. A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to...
Cisco Business Routers Found Vulnerable to Critical Remote Hacking Flaws
Cisco on Wednesday rolled out patches to address eight security vulnerabilities, three of which could be weaponized by an unauthenticated attacker to gain remote code execution RCE or cause a denial-of-service DoS condition on affected devices. The most critical of the flaws impact Cisco Small...
CVE-2022-35422
Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the qid parameter at update.php...
CVE-2022-35422
Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the qid parameter at update.php...
Sql injection
Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the qid parameter at update.php...
CVE-2022-35422
CVE-2022-35422 affects Web Based Quiz System v1.0, with a SQL injection via the qid parameter in update.php. The Red/European and vendor-related entries confirm the vulnerability is in the web app and involves the qid input being used in a SQL query, leading to potential data exposure or modifica...