17641 matches found
CVE-2021-45716
The CVE-2021-45716 issue affects the rusqlite crate for Rust, in versions 0.25.x before 0.25.4 and 0.26.x before 0.26.2, where create_collation (and related closure-handling APIs) exhibits a use-after-free condition. The OSV entries for rusqlite (GHSA variants) and related advisories confirm the ...
CVE-2021-44598
CVE-2021-44598 affects Attendance Management System 1.0. An XSS vulnerability arises when the value of the FirstRecord request parameter is copied into an HTML tag attribute enclosed in double quotes, enabling reflected XSS. Exploitation could allow an attacker to access the system and store info...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4j Simple Exploit A Proof-Of-Concept Exploit for CVE-202...
CVE-2021-43630
Projectworlds Hospital Management System v1.0 is affected by an SQL injection in add_patient.php across multiple parameters. The root cause is improper input handling allowing an authenticated attacker to manipulate queries, potentially compromising the database and, in some cases, achieving remo...
Why I’m Proud to Protect Billions of People Worldwide
I decided to pursue a career in IT after working as a support engineer for internal employees as part of my very first job. It immediately opened my eyes to something that I found as interesting as I did shocking: Lots of people don’t understand information security — and what’s more, they don’t...
CVE-2021-45253
The CVE-2021-45253 entry concerns Simple Cold Storage Management System 1.0. The vulnerability is in the id parameter of view_storage.php, allowing SQL injection. A payload injected a SQL sub-query invoking MySQL load_file with a UNC path referencing an external URL, and the application interacte...
CVE-2021-24846
The CVE-2021-24846 issue affects the WordPress plugin Ni WooCommerce Custom Order Status (versions before 1.9.7). The get_query() function does not properly sanitize the sort parameter before using it in a SQL statement via the niwoocos_ajax action, enabling SQL injection. Impact described across...
Unchecked return value for token.transfer call
Handle WatchPug Vulnerability details It is usually good to add a require-statement that checks the return value or to use something like safeTransfer; unless one is sure the given token reverts in case of a failure. Instances include: IERC20Upgradeablevault.transferto, minTokenIn-amountToken;...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
CVE-2020-3705
CVE-2020-3705 entry is rejected/not used per the Initial Description; it does not represent an active vulnerability.
CVE-2020-3697
CVE-2020-3697 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2020-16834
This CVE-2020-16834 entry is rejected and not used; it does not represent an active vulnerability.