Booked vulnerable to open redirect

Overview Booked provided by Twinkle Toes Software contains an open redirect vulnerability CWE-601. Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When...

Non-Privilege user can view Patient's Amendments

Description We would like to report the vulnerability we found during software testing. The OpenEMR 7.0.0 latest version Open-Source electronic health records and medical practice management application has Insecure direct object reference IDOR to function “Patient’s Amendments”, and it never bee...

CVE-2020-36558

CVE-2020-36558 refers to a race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX that can cause a NULL pointer dereference and a general protection fault. The vulnerability is triggered locally within the kernel, with impact described as high availability risk if exploited, and the...

Siemens SCALANCE X Switch Devices Buffer Copy Without Checking Size of Input (CVE-2022-26649)

A vulnerability has been identified in SCALANCE X200-4P IRT All versions, SCALANCE X200-4P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X202-2IRT All versions, SCALANC...

CVE-2022-34586

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/studentgradewise.php...

CVE-2022-1264 Inductive Automation Ignition

The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2023-49831)

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. Foxit PDF Reader suffers from a buffer overflow vulnerability that stems from a lack of validation of the existence of an Annotation object before performing an operation on it, which...

CVE-2022-21572

Oracle Communications Billing and Revenue Management (component: Billing Care) is affected by CVE-2022-21572 in versions 12.0.0.4.0–12.0.0.6.0. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to cause unauthorized read/update/delete of data, with user interaction requ...

CVE-2022-21533

CVE-2022-21533 affects Oracle Solaris 11 SMB Server. The vulnerability in the SMB Server component allows a low-privilege, local attacker to cause a hang or repeatable crash (complete DoS). This matches Oracle’s July-2022 CPU advisory context for Solaris; patches addressing this vulnerability wer...

CVE-2022-2476

CVE-2022-2476 affects wavpack (notably wavpack 5.4.0). The issue is a null pointer dereference in wavunpack.c:834, causing a segmentation fault (AddressSanitizer report). Several connected advisories confirm the same root cause and indicate a remediation path: upgrade to a newer wavpack version (...

CVE-2022-34635

CVE-2022-34635 affects the CVA6 OpenHW core. The mstatus.sd field does not update when mstatus.fs is set to Dirty in commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a. Documents indicate this is a vulnerability in the CVA6 design/implementation, with an NVD CVSS v3.1 base score of 9.8 (critical) an...

CVE-2022-2039

CVE-2022-2039 concerns the Free Live Chat Support plugin for WordPress, where a CSRF flaw stems from missing nonce protection in livesupporti_settings() (livesupporti.php). The affected range is up to and including 1.0.11 (some sources also reference 1.0.12). The vulnerability allows unauthentica...

CVE-2022-24690

CVE-2022-24690 : A blind boolean-based SQL injection in PresAbs.php on DSKNet 2.16.136.0 and 2.17.136.5 allows unauthenticated attackers to taint database data and extract sensitive information (e.g., user badge numbers and PINs) via crafted HTTP requests. The issue is linked to Broken Access Con...

Orange Station 1.0 SQL injection Vulnerability

Title: Orange Station 1.0 SQLi Author: nu11secur1ty Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html Reference:...

CVE-2022-2118

The CVE-2022-2118 entry concerns the WordPress 404s plugin, where versions before 3.5.1 fail to sanitize and escape fields, enabling stored XSS by high-privilege users (e.g., admin). Exploitation context is authenticated/admin access, with payloads visible via the plugin’s 404 handling. The vulne...

CVE-2017-20132

CVE-2017-20132 affects Itech Multi Vendor Script 6.49. The vulnerability is a SQL injection in the file /multi-vendor-shopping-script/product-list.php triggered by manipulating the argument pl. Exploitation may be remote; public exploit/disclosures exist. Documented impacts indicate high confiden...

CVE-2022-35902

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an OBJ file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within...

Out-of-bounds

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an FBX file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within...

Out-of-bounds

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a 3DS file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within...

CVE-2022-35906

Bentley MicroStation (before 10.17.0.x) and Bentley View (before 10.17.0.x) are affected. Opening a DGN file containing crafted data can trigger an out-of-bounds read during parsing, allowing an attacker to read information in the context of the current process. This aligns with reported CVE-2022...