11696 matches found
Code injection
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0...
CVE-2023-4304 Business Logic Errors in froxlor/froxlor
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0...
CVE-2023-4304
CVE-2023-4304 concerns Froxlor (froxlor/froxlor) with business logic errors in versions prior to 2.0.22 and 2.1.0. Connected documents identify the affected software as Froxlor and describe the issue as a logic/design flaw in the application rather than a low-level vulnerability in a library. Mit...
CVE-2023-4304 Business Logic Errors in froxlor/froxlor
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0...
CVE-2023-4304 Business Logic Errors in froxlor/froxlor
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0...
The vulnerability of the AppSandbox component in macOS operating systems allows a hacker to bypass the protective mechanisms of the isolated software environment.
The vulnerability of the AppSandbox component in macOS operating systems is related to security configuration errors. Exploiting this vulnerability could allow an attacker to bypass the security measures of the isolated software environment...
TEST PR 1093 - edited
Lines of code L1 Vulnerability details edited Assessed type call/delegatecall --- The text was updated successfully, but these errors were encountered: All reactions...
Upgraded Q -> 2 from #513 [1691698843467]
Judge has assessed an item in Issue 513 as 2 risk. The relevant finding follows: Issue 2 --- The text was updated successfully, but these errors were encountered: All reactions...
CVE-2022-48590
A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...
CVE-2022-48590
A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...
Sql injection
A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...
CVE-2022-48590
A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...
CVE-2022-48590
CVE-2022-48590 affects ScienceLogic SL1, specifically the admin dynamic app mib errors feature. The root cause is unsanitized user-controlled input being passed directly into a SQL query, enabling SQL injection. Impact is high on confidentiality, integrity, and availability, with CVSSv3.1 base sc...
CVE-2023-37862
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service...
Design/Logic Flaw
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service...
Important: grpc
Issue Overview: When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of HPACK tables between sender and receiver. If leveraged, say, between a proxy and...
AlmaLinux 8 : libxml2 (ALSA-2023:4529)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:4529 advisory. - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in...
MAL-2023-1061 Malicious code in web3tool-errors (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 561512a85b3d35e7036182a3e45710bc0168b57644ed6fc0b4483443649d544c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in web3tool-errors (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 561512a85b3d35e7036182a3e45710bc0168b57644ed6fc0b4483443649d544c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...