CVE-2022-42797

An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges...

CVE-2022-42797

An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges...

Sql injection

An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges...

CVE-2022-42797

The CVE-2022-42797 entry corresponds to an injection issue in Apple Xcode, specifically affecting the IDE Xcode Server component. According to multiple connected sources, the root cause is an input validation weakness that could allow an (unprivileged) app to gain root privileges. The vulnerabili...

CVE-2022-42797

An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges...

CVE-2022-42797

An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges...

PT-2023-19462 · Totolink · Totolink A7100Ru

Name of the Vulnerable Software and Affected Versions: TOTOLink A7100RU version 7.4cu.2313 B20191024 Description: A command injection issue was discovered. Recommendations: For TOTOLink A7100RU version 7.4cu.2313 B20191024, at the moment, there is no information about a newer version that contain...

GHSA-R3VQ-92C6-3MQF Duplicate advisory: Sequelize - Unsafe fall-through in getWhereConditions

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vqfx-gj96-3w95. This link is maintained to preserve external references. Original Description Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

PT-2023-19448 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-PoE version 6.2c.884 Description: A command injection issue was found via the admuser parameter in the setPasswordCfg function. This allows for potential command injection attacks. Recommendations: For TOTOLINK CA300-PoE versio...

PT-2022-26587 · Apple · Xcode +1

Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 14.1 Description: An injection issue was addressed with improved input validation, which may allow an app to gain root privileges. Recommendations: For versions prior to 14.1, update to Xcode 14.1 to resolve the issue...

PT-2022-26875 · Ip Com · Ip-Com Ew9

Name of the Vulnerable Software and Affected Versions: IP-COM EW9 version 15.11.0.149732 Description: A command injection issue was found in the formSetDebugCfg function, which could potentially be exploited. Recommendations: For IP-COM EW9 version 15.11.0.149732, as a temporary workaround,...

PT-2022-18600 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: A command injection issue exists in the web interface's util set abode code functionality, allowing arbitrary command execution via a specially-crafted HTTP...

PT-2022-25918 · Unknown · Open Source Sacco Management System

Name of the Vulnerable Software and Affected Versions: Open Source SACCO Management System version 1.0 Description: A SQL injection issue was found in the id parameter at the /sacco shield/ajax.php?action=delete plan API endpoint. This allows for potential exploitation. Recommendations: For Open...

PT-2022-22606

Name of the Vulnerable Software and Affected Versions Bus Pass Management System version 1.0 Description A SQL Injection issue was found in the Bus Pass Management System. The vulnerability can be exploited via the searchdata parameter at the "/buspassms/download-pass.php" API endpoint...

PT-2022-25397 · Zkbio · Zkbio Time

Name of the Vulnerable Software and Affected Versions: ZKBio Time version 8.0.7 Description: A CSV injection issue allows attackers to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module. Recommendations: For version 8.0.7, consider...

PT-2022-23275 · Unknown · Sazanrjb Inventorymanagementsystem

Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue in Stocks.java allows attackers to execute arbitrary SQL commands via parameters such as productcode. This enables unauthorized access and manipulation of...

PT-2022-23862 · Ems · Ems

Name of the Vulnerable Software and Affected Versions: EMS versions 6.2 Description: A SQL injection issue exists in the school information query interface, specifically in the repschoolproj.php file, which can lead to data leakage. Recommendations: For EMS version 6.2, at the moment, there is no...

SUSE-SU-2022:3020-1 Security update for php-composer2

This update for php-composer2 fixes the following issues: - CVE-2022-24828: Fixed a code injection issue that affected integrators using specific APIs to read untrusted input files bsc1198494...

Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11188)

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of the Ingredients Stock Management System is vulnerable to a SQL injection vulnerability in the /classes/Master .php?f=deletestockout location has an SQL injection issue wit...

PT-2022-23586 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: A SQL injection issue was found in the Library Management System via the bookId parameter at the "/staff/delete.php" API endpoint. Recommendations: For Library Management System version 1.0,...