52 matches found
CVE-2023-4558
A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file staffdata.php. The manipulation of the argument columns0data leads to sql injection. The attack can be launched remotely. The...
CVE-2022-35655
CVE-2022-35655 affects Pegasystem PEGA Platform releases 7.3 through 8.7.3 and is due to an XSS flaw caused by a misconfiguration of a datapage setting. The vulnerability is documented across multiple sources (NVD, Red Hat advisories, and CNVD) and describes cross-site scripting exposure arising ...
CVE-2022-26573
Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters...
CVE-2022-23037
Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...
In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3 special files are not considered leading to a move_data_page NULL pointer dereference.
...
DEBIAN-CVE-2021-44879
In gcdatasegment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a movedatapage NULL pointer dereference...
AZL-8577 CVE-2021-44879 affecting package kernel for versions less than 5.15.26.1-1
In gcdatasegment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a movedatapage NULL pointer dereference...
Elevation of Privilege Vulnerability in the background of emlog personal blog system
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A privilege elevation vulnerability exists in the background /src/admin/data.php page of the emlog personal blog system. An attacker can exploit the vulnerability to elevate privileges by importing files...
Emlog personal blog system exists arbitrary file deletion vulnerability
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. The /src/admin/data.php page of the emlog personal blog system has an arbitrary file deletion vulnerability. As Bak fails to bring in the unlink function directly after the restriction, allowing an attacker to delete...
Cross-site scripting vulnerability in KingCMS 'manage_data.php' page
KingCMS is a content management system based on WEB technology. A cross-site scripting vulnerability exists in the KingCMS 'managedata.php' page. The program fails to filter user-supplied input, allowing an attacker to construct a malicious web page and trick users into parsing it to execute...
CVE-2002-1409
CVE-2002-1409 affects HP-UX 11.00 through 11.11, where ptrace handling allows a local user to trigger a denial-of-service (data page fault panic) via an incorrect reference to thread register state. The available documents confirm the affected platform and the root cause (ptrace thread-state refe...