565 matches found
Fat Free CRM vulnerable to SQL Injection
Multiple SQL injection vulnerabilities in app/controllers/homecontroller.rb in Fat Free CRM before 0.12.1 allow remote authenticated users to execute arbitrary SQL commands via 1 the homepage timeline feature or 2 the activity feature...
Fat Free CRM allows remote attackers to obtain sensitive information via a direct request
Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json...
Fat Free CRM contains Cross-site Request Forgery vulnerablilities
Multiple cross-site request forgery CSRF vulnerabilities in Fat Free CRM before 0.12.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to the lack of a protectfromforgery line in app/controllers/applicationcontroller.rb...
Fat Free CRM has fixed token value
config/initializers/secrettoken.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secrettoken value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code...
GHSA-9GGP-5RF4-X7Q9 Fat Free CRM vulnerable to SQL Injection
Multiple SQL injection vulnerabilities in app/controllers/homecontroller.rb in Fat Free CRM before 0.12.1 allow remote authenticated users to execute arbitrary SQL commands via 1 the homepage timeline feature or 2 the activity feature...
GHSA-4XQ9-VW89-P5CX Fat Free CRM allows remote attackers to obtain sensitive information via a direct request
Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json...
GHSA-MCVQ-7XJQ-46X6 Fat Free CRM contains Cross-site Request Forgery vulnerablilities
Multiple cross-site request forgery CSRF vulnerabilities in Fat Free CRM before 0.12.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to the lack of a protectfromforgery line in app/controllers/applicationcontroller.rb...
The vulnerability of the Fast FAT File System Driver for the Microsoft Windows operating system allows a hacker to gain increased privileges.
The vulnerability of the Fast FAT File System Driver for the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2022-23293
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability...
CVE-2022-23293
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability...
CVE-2022-23293
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability...
Privilege escalation
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability...
CVE-2022-23293 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
...
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
...
PT-2022-1861 · Microsoft · Windows Fast Fat File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Fast FAT File System Driver affected versions not specified Description: The issue is related to unsafe privilege management in the Windows Fast FAT File System Driver, which can be exploited to elevate privileges. This could allow an...
PT-2021-24031 · Open Design Alliance · Open Design Alliance Drawings Sdk
Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: The issue exists within the parsing of DGN files, where crafted data and a lack of proper validation for the XFAT sectors count can trigger a write operation past the en...
The vulnerability of the Windows Fast FAT File System Driver allows attackers to circumvent security restrictions and increase their privileges.
The vulnerability of the Windows Fast FAT File System Driver in the operating system Windows is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and gain elevated privileges...
CVE-2021-41377
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability...