CVE-2017-20110

A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue is some unknown functionality of the component Administration. The manipulation as part of JSON leads to information disclosure Credentials. The attack may be launched remotely...

Denial Of Service (DoS)

systemds is vulnerable to denial of service. The vulnerability exists because the readExternal function of DecoderComposite.java does not properly check the number of deserialized decoders in the DecoderComposite object, allowing an attacker to crash the application by providing a large size of...

CVE-2022-1521 3.2.4 IMPROPER ACCESS CONTROL CWE-284

LRM does not implement authentication or authorization by default. A malicious actor can inject, replay, modify, and/or intercept sensitive data...

CVE-2022-1521

CVE-2022-1521 affects Illumina Local Run Manager (LRM) software versions 1.3–3.1 used on various Illumina instruments. The root cause is that LRM does not implement authentication or authorization by default, allowing an unauthenticated, network-facing attacker to inject, replay, modify, or inter...

PT-2022-11345

Name of the Vulnerable Software and Affected Versions LaiKetui version 3.5.0 Description A SQL injection issue exists in the background administrator list, which could potentially allow unauthorized access or data manipulation. Recommendations For LaiKetui version 3.5.0, at the moment, there is n...

Vulnerabilities fixed in Dell SupportAssistant

Vulnerabilities have been fixed in Dell SupportAssist. The vulnerabilities allow a malicious party to launch attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Manipulation of data Remote code execution User Rights Access to system data Increased...

JTEKT TOYOPUC Products 访问控制错误漏洞

JTEKT TOYOPUC Products is a family of programmable controllers from JTEKT Japan. An access control error vulnerability exists in JTEKT TOYOPUC Products that stems from a lack of authentication functionality in the affected products. An attacker could use this vulnerability to change the controlle...

PT-2022-11418

Name of the Vulnerable Software and Affected Versions NOKIA VitalSuite SPM version 2020 Description The issue is related to SQL injection through the UserName variable. This allows for potential unauthorized access or manipulation of data. Recommendations For NOKIA VitalSuite SPM version 2020,...

PT-2022-21266

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the /psrs/admin/?page=inquiries/view inquiry&id= endpoint. This allows for potential data manipulation. No information is provided about the estimated number o...

PT-2022-21256

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/categories/manage field order.php?id=" API endpoint, where the id variable is vulnerable. This allows for potential unauthorized access and...

Security Updates for Microsoft Office Products C2R (January 2020)

The Microsoft Office Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited...

Vulnerability fixed in Fortinet products

Vulnerabilities have been fixed in several products from Fortinet. The vulnerabilities allow a malicious party to execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Manipulation of data Circumvention of security measure Remote code execution...

PT-2022-21050

Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue concerns SQL Injection via the /ip/car-rental-management-system/admin/ajax.php?action=login API endpoint. This allows for potential unauthorized access and data manipulation. No...

PT-2022-21022

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the bcms/classes/Master.php endpoint, specifically when the f parameter is set to delete product. This allows...

Car Rental Management System SQL注入漏洞

Car Rental Management System is a car rental management system. SQL injection vulnerability exists in Car Rental Management System, which can be exploited by attackers to view, add, modify or delete information in the back-end database...

Vulnerabilities fixed in IBM QRadar SIEM

Vulnerabilities have been fixed in the IBM QRadar Data Synchronization App for IBM QRadar SIEM. The vulnerabilities are are in underlying software and libraries, such as Node.js and SQLite. The vulnerabilities potentially enable a malicious person to able to perform attacks that result in the...

CVE-2022-24848

DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the /api/programs/orgUnits?programs= API endpoint in DHIS2 versions prior to 2.36.10.1 and 2.37.6.1. The system is vulnerable to attack only from...

CVE-2022-24848 SQL Injection in DHIS2's in OrgUnit program association

DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the /api/programs/orgUnits?programs= API endpoint in DHIS2 versions prior to 2.36.10.1 and 2.37.6.1. The system is vulnerable to attack only from...

PT-2022-16922

Name of the Vulnerable Software and Affected Versions DHIS2 versions prior to 2.36.10.1 and 2.37.6.1 Description DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security issue affects the "/api/programs/orgUnits?programs=" API...

PT-2022-21016

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue allows for SQL Injection via the "/ofrs/admin/?page=requests/view request&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized...