505 matches found
CVE-2022-27299
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php...
CVE-2022-28008
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendancedelete.php...
Sql injection
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...
Sql injection
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positionedit.php...
Sql injection
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/itemfunc.cc:148...
The vulnerability of the avi.c component of the VLC Media Player allows a hacker to cause a service failure.
The vulnerability of the avi.c component of the VLC Media Player media player is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the Log component in the Oracle Enterprise Session Border Controller allows a perpetrator to cause a partial service disruption.
The vulnerability of the Log component in the Oracle Enterprise Session Border Controller is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause a partial service outage using the HTTP protocol...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.
Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable due to buffer overflows in the stack. Exploitation of this vulnerability can allow an attacker to execute arbitrary code remotely...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.
Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable due to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.
Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable due to buffer overflows in the stack. Exploitation of this vulnerability can allow an attacker to execute arbitrary code remotely...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain privileged access
Vulnerability of the MySQL Cluster component: General database management system vulnerabilities in MySQL Cluster exist due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain privileged access remotely...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain unauthorized access to protected information or cause service failures.
Vulnerability of the Cluster component: General database management systems like MySQL Cluster involve reading data from beyond the buffer in memory during data node processing. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information or cause service...
Out-of-bounds
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipxlzmaaloneinit...
Improper access control
EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata...
CVE-2022-26536
Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setFixTools...
CVE-2022-25010
The component /rootfs in RageFile of Stepmania v5.1b2 and below allows attackers access to the entire file system...
Security feature bypass
A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25101
A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...