CVE-2021-38730

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntInfo.php...

PT-2022-26787 · Unknown · Rukovoditel

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 3.2.1 Description: A stored cross-site scripting XSS issue in the Dashboard Configuration feature, specifically at the "index.php?module=dashboard configure/index" endpoint, allows authenticated attackers to execute...

SEMCMS SQL Injection Vulnerability

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which stems from a SQL injection issue in AntInfo.php...

Information disclosure

Yordam Library Information Document Automation product before version 19.02 has an unauthenticated Information disclosure vulnerability...

CVE-2021-45476

CVE-2021-45476 affects the Yordam Library Information Document Automation product, prior to version 19.02, with an unauthenticated reflected XSS vulnerability. The issue is caused by a reflected cross-site scripting flaw that does not require authentication. Impact is described as vulnerability i...

PT-2022-7121

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A flaw was found in GLib where GVariant deserialization is vulnerable to a slowdown issue. A crafted GVariant can cause excessive processing, leading to denial of service. The issue is related t...

PT-2022-26066 · Delta Electronics · Infrasuite Device Master

Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior Description: The issue allows unauthenticated users to trigger the WriteConfiguration method. This could enable an attacker to modify user configuration files, such as...

Tenda AX1803 Buffer Error Vulnerability

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A security vulnerability exists in the Tenda AX1803 v1.0.0.1, which originates from a heap overflow in the GetParentControlInfo function...

Exploit for OS Command Injection in Newspaperclub Pdf_Info

CVE-2022-36231 The ruby gem pdfinfohttps://rubygems.org/g...

CVE-2022-35876

Four format-string injection vulnerabilities exist in Abode Systems, Inc. iota All-In-One Security Kit (firmware 6.9X/6.9Z) within the XCMD testWifiAP path. The root cause is usage of attacker-controlled configuration values (default_key_id and key) in log/command construction for Wi‑Fi setup, en...

guide2.info Cross Site Scripting vulnerability OBB-3012477

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

DEBIAN-CVE-2022-43044

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gfisomgetmetaiteminfo at /isomedia/meta.c...

Design/Logic Flaw

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gfisomgetmetaiteminfo at /isomedia/meta.c...

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.

...

GPAC security vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.1-DEV-rev368-gfd054169b-master, which stems from the gfisomgetmetaiteminfo function in /isomedia/meta.c that was found to contain a segmentation violation...

CVE-2022-39301

CVE-2022-39301 concerns sra-admin, a front/back-end separated rights management system. The issue affects version 1.1.1, where a storage cross-site scripting (XSS) vulnerability lies in the Profile Picture Upload under Personal Center. An attacker who logs in could upload an HTML page containing ...

CVE-2022-43044

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gfisomgetmetaiteminfo at /isomedia/meta.c...

info-potsdam.de Cross Site Scripting vulnerability OBB-2999954

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-W596-4WVX-J9J6 Withdrawn Advisory: ReDoS in py library when used with subversion

Withdrawn Advisory This advisory has been withdrawn because evidence does not suggest that CVE-2022-42969 is a valid, reproducible vulnerability. This link is maintained to preserve external references. Original Description The py library through 1.11.0 for Python allows remote attackers to condu...

PYSEC-2022-43183

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...