CVE-2022-35947: Improper Neutralization of Special Elements used in an SQL Command

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions have been found to be vulnerable to a SQL injection attack which an attacker could...

CVE-2022-37096

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EnableIpv6...

CVE-2022-37096

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EnableIpv6...

CVE-2022-36489

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6...

CVE-2022-36489

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6...

H3C Magic NX18 Plus 缓冲区错误漏洞

The H3C Magic NX18 Plus is a Gigabit dual-band router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic NX18 Plus NX18PV100R003 version, which stems from a stack overflow in the EnableIpv6 method...

CVE-2022-20267

In bluetooth, there is a possible way to enable or disable bluetooth connection without user consent due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

The vulnerability of the SAP Enable Now Manager platform, related to deficiencies in the authentication process, allows a perpetrator to gain unauthorized access to protected information and compromise its integrity.

The vulnerability of the SAP Enable Now Manager platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information and compromise its integrity...

CVE-2022-35293

Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application...

CVE-2022-35293

Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application...

CVE-2022-35293

Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application...

Design/Logic Flaw

Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application...

PT-2025-25895

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.4.0-54 through 5.4.0-162 Linux kernel versions 5.10.142-1 through 5.10.176-1 Linux kernel versions 5.15.0-33 through 5.15.0-70 Description A flaw exists in the optc1 enable optc clock function of the Linux kernel due to...

CVE-2022-35293: Missing Authorization

Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application...

CVE-2022-35293

SAP Enable Now is affected by insecure session management that allows an unauthenticated attacker to gain access to a user’s account, with possible viewing or modification of user data and limited impact on confidentiality and integrity. The connected documents confirm the issue but do not provid...

CVE-2022-35293

Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application...

CVE-2022-35293

Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application...

PT-2022-4103

Name of the Vulnerable Software and Affected Versions SAP Enable Now affected versions not specified Description The issue is related to insecure session management and authorization procedure weaknesses. An unauthenticated attacker can exploit this to gain access to a user's account, potentially...

SAP Enable Now Manager 安全漏洞

SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is primarily used for online learning and training in SAP and non-SAP systems, among other things. A security vulnerability exists in SAP Enable Now Manager. No information about this...

CVE-2022-33731: Improper Access Control

Improper access control vulnerability in DesktopSystemUI prior to SMR Aug-2022 Release 1 allows attackers to enable and disable arbitrary components...