Covid-19 Travel Pass Management System SQL注入漏洞

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. It provides an online platform for individuals to submit travel passes within the Covid-19 restrictions. A SQL injection vulnerability exists in Covid-19 Travel Pass Management System version 1.0, which stems from...

CVE-2022-1726

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

Design/Logic Flaw

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

The vulnerability of the input protection mechanism in Cisco Firepower Management Center (FMC) software allows a hacker to disclose the protected information.

The vulnerability of the input protection mechanism in Cisco Firepower Management Center FMC software is related to errors in processing incoming data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of extensions for providing access to InTouch Access Anywhere and Plant SCADA Access Anywhere, related to the disclosure of information in the error data area, allows a intruder to execute arbitrary OS commands.

The vulnerability of extensions for providing access to InTouch Access Anywhere and Plant SCADA Access Anywhere relates to the disclosure of information in the error area of data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary OS commands remotely...

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system arises from the failure to remove encrypted URI schemes from web pages. This allows a perpetrator to trigger a service failure or expose protected information.

The vulnerability of the Microprogramming Software of the Cisco TelePresence Collaboration Endpoint CE device and the Cisco RoomOS operating system is related to the lack of measures taken to neutralize encrypted URI schemes on web pages. Exploiting this vulnerability can allow a malicious actor ...

The vulnerability of the Windows Graphics component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

CVE-2022-29932

The CVE-2022-29932 entry affects PRIMEUR SPAZIO 2.5.1.954 (File Transfer). The HTTP Server component allows an unauthenticated attacker to obtain sensitive data related to the content of transferred files through a crafted HTTP request. This is the explicit vulnerability described in CVE records ...

Vulnerability of the MIPS32 and MIPS64 square root calculation procedures in the OpenSSL library, which allows attackers to disclose sensitive information

The vulnerability of MIPS32 and MIPS64 square root extraction procedures in the OpenSSL library is related to the repeated use of secret keys. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

CVE-2022-20117

In TBD of TBD, there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

Information disclosure

In TBD of TBD, there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

Windows Clustered Shared Volume Information Disclosure Vulnerability

...

SAP Employee Self Service 输入验证错误漏洞

SAP Employee Self Service is an employee self-service platform from SAP Germany. An input validation error vulnerability exists in SAP Employee Self Service, which can be exploited by an attacker to disclose information...

PT-2022-3500 · Microsoft · Windows Remote Desktop Protocol Client +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Protocol Client affected versions not specified Description: The vulnerability is related to the Remote Desktop Protocol Client in the Windows operating system and involves the disclosure of information in an error data...

PT-2022-3025 · Intel · Intel Ssd +2

Name of the Vulnerable Software and Affected Versions: IntelR SSD versions affected versions not specified IntelR SSD DC versions affected versions not specified IntelR OptaneTM SSD versions affected versions not specified Description: The issue is related to a protection mechanism failure in the...

Multiple vulnerabilities in Operation management interface of FUJITSU Network IPCOM

Overview FUJITSU Network IPCOM provided by FUJITSU LIMITED is an integrated network appliance. Operation management interface used to operate FUJITSU Network IPCOM contains multiple vulnerabilities listed below. OS command injection in the web console CWE-78 - CVE-2022-29516 Buffer overflow in th...

The vulnerability of the display mechanism of Blink web pages in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of the Blink web page display mechanism in Microsoft Edge and Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the “Bookmarks” control in Microsoft Edge and Google Chrome browsers allows a hacker to disclose protected information.

The vulnerability of the “Bookmarks” control element in Microsoft Edge and Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

CVE-2022-20764

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...

CVE-2022-20794

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...