DEBIAN-CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

UBUNTU-CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

PT-2023-10220 · Unknown · Dovgalyuk Aibattle

Name of the Vulnerable Software and Affected Versions: Dovgalyuk AIBattle affected versions not specified Description: A critical vulnerability has been found in Dovgalyuk AIBattle. The issue affects the sendComments function of the file site/procedures.php. The manipulation of the text argument...

PT-2023-14641 · Unknown · Webbrowser-Rs

Name of the Vulnerable Software and Affected Versions: webbrowser-rs version 0.8.2 Description: An issue in the IpFile argument allows attackers to access arbitrary files via supplying a crafted URL. Recommendations: For version 0.8.2, consider restricting access to the IpFile argument until a...

The vulnerability of the command-line interface of the FortiExtender signal booster software arises from insufficient validation of arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of the command-line interface of the FortiExtender signal booster software relates to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Sql injection

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /fos/admin/ajax.php?action=login of the component Login Page. The manipulation of the argument Username leads to sql injection. It is possib...

CVE-2023-0244

A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the file \App\Manage\Controller\KefuController.class.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2023-33042 · Unknown · Xmlrpc Client

Name of the Vulnerable Software and Affected Versions: xmlrpc Client affected versions not specified Description: The issue allows an attacker to force the client to access local files or connect to undesired URLs instead of the intended target server's URL. This is possible by abusing the $metho...

SQL Injection

github.com/square/squalor is vulnerable to SQL injection. The vulnerability exists due to improper argument handling of the database queries which allows an attacker to inject and execute arbitrary SQL queries...

CVE-2022-33290

Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed...

Null pointer dereference

Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed...

PT-2023-16029 · Unknown · Control Id Panel +1

Name of the Vulnerable Software and Affected Versions: Control iD Gerencia Web version 1.30 Control iD Panel affected versions not specified Description: A vulnerability was found in the Web Interface component, where the manipulation of the Nome argument leads to cross-site scripting. The attack...

Sql injection

A vulnerability, which was classified as critical, was found in pouetnet pouet 2.0. This affects an unknown part. The manipulation of the argument howmany leads to sql injection. The identifier of the patch is 11d615931352066fb2f6dcb07428277c2cd99baf. It is recommended to apply a patch to fix thi...

CVE-2020-36648 pouetnet pouet sql injection

A vulnerability, which was classified as critical, was found in pouetnet pouet 2.0. This affects an unknown part. The manipulation of the argument howmany leads to sql injection. The identifier of the patch is 11d615931352066fb2f6dcb07428277c2cd99baf. It is recommended to apply a patch to fix thi...

CVE-2014-125066 emmflo yuko-bot denial of service

A vulnerability was found in emmflo yuko-bot. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument title leads to denial of service. The attack can be initiated remotely. The name of the patch is e580584b877934a4298d4dd0c497c79e579380d0. I...

PT-2023-10137 · Unknown · Corincerami Curiosity

Name of the Vulnerable Software and Affected Versions: corincerami curiosity affected versions not specified Description: A critical vulnerability was found in corincerami curiosity, affecting an unknown functionality of the file app/controllers/image controller.rb. The manipulation of the sol...

PT-2023-10335 · Joomla · Joomla Mod Einsatz Stats

Name of the Vulnerable Software and Affected Versions: joomla mod einsatz stats versions up to 0.2 Description: A critical issue was found, affecting the getStatsByType function in the helper.php file. The manipulation of the year argument leads to SQL injection. Recommendations: For versions up ...

PT-2023-10209 · Sukohi · Sukohi Surpass

Name of the Vulnerable Software and Affected Versions: SUKOHI Surpass versions prior to 1.0.0 Description: A critical vulnerability has been found in SUKOHI Surpass, affecting unknown code in the file src/Sukohi/Surpass/Surpass.php. The manipulation of the argument dir leads to pathname traversal...