CVE-2023-29743: Origin Validation Error

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database...

CVE-2023-29740: Undefined Security Weakness

An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause a denial of service attack by manipulating the database...

CVE-2023-29745

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database...

CVE-2023-29742

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulating the database...

Faculty Evaluation System SQL Injection Vulnerability (CNVD-2023-45448)

Faculty Evaluation System is a faculty evaluation system. A SQL injection vulnerability exists in Faculty Evaluation System, which can be exploited by an attacker to directly manipulate the database by constructing malicious query statements to obtain sensitive information or perform arbitrary...

CVE-2023-29734

An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database...

PT-2023-22393 · Unknown · Bestweather

Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: An issue in BestWeather allows unauthorized apps to cause a code execution attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, at the moment, there is no information abou...

PT-2023-22391 · Unknown · Alarm Clock For Heavy Sleepers

Name of the Vulnerable Software and Affected Versions: Alarm Clock for Heavy Sleepers version 5.3.2 Description: The issue allows unauthorized apps to cause a denial of service attack by manipulating the database. Recommendations: For Alarm Clock for Heavy Sleepers version 5.3.2, consider...

CVE-2023-29745: Origin Validation Error

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database...

CVE-2023-29741

CVE-2023-29741 affects BestWeather v7.3.1 for Android. The issue enables unauthorized apps to escalate privileges by manipulating the app’s database, per Red Hat, NVD, PRION, CNNVD, and related entries. The connected documents consistently describe the vulnerable component as the database interac...

BestWeather 安全漏洞

BestWeather is a weather advisor application from BestWeather open source. A security vulnerability exists in BestWeather version v.7.3.1. An attacker exploited the vulnerability to execute code by manipulating the database...

PT-2023-22395 · Unknown · Bestweather

Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: An issue in BestWeather allows unauthorized apps to cause a persistent denial of service attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, as a temporary workaround,...

CVE-2023-29743

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database...

CVE-2023-29734: Improper Privilege Management

An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database...

CVE-2023-29741: Undefined Security Weakness

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause an escalation of privileges attack by manipulating the database...

PT-2023-22392 · Unknown · Bestweather

Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: An issue in BestWeather allows unauthorized apps to cause a privileges escalation attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, at the moment, there is no informati...

Trend Micro Apex Central SQL Injection Vulnerability (CNVD-2023-57659)

Trend Micro Apex Central is a Web-based console from Trend Micro, Inc. Trend Micro Apex Central suffers from an SQl injection vulnerability that can be exploited by an attacker to submit a specially crafted SQL request to manipulate the database, obtain sensitive information or execute arbitrary...

Sql injection

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 243163...

PT-2023-15542

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7 Description The issue allows a remote attacker to send specially crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the back-end database. This is a...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. PrestaShop suffers from a SQL injection vulnerability. An attacker exploiting this vulnerability can write,...