CVE-2023-30770

CVE-2023-30770 affects ASUSTOR Data Master (ADM). The vulnerability is a stack-based buffer overflow caused by a lack of data size validation in ADM, allowing arbitrary code execution. Affected ADM versions include 4.0.6.REG2, 4.1.0 and below, and 4.2.0.RE71 and below. The OpenVAS/PRION/CNNVD/CVE...

ASUSTOR Data Master 缓冲区错误漏洞

ASUSTOR Data Master is ASUS China's proprietary operating system on the ASUSTOR NAS, featuring a tablet-like graphical interface comparable to a zero-learning curve, allowing people to get started as soon as they use it. A security vulnerability exists in ASUSTOR Data Master versions prior to...

PT-2023-22968 · Asustor · Asustor Data Master

Name of the Vulnerable Software and Affected Versions: ASUSTOR Data Master ADM versions 4.0.6.REG2, 4.1.0 and below ASUSTOR Data Master ADM versions 4.2.0.RE71 and below Description: A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master ADM due to the lack of data size...

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in the improper configuration of the catalog resolution setting, which allows attackers to escalate their privileges.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to the improper installation of the catalog resolution. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, due to insufficient validation of input data, allows attackers to exploit their privileges.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring, due to deficiencies in access control, allows unauthorized access by attackers to configuration files.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to configuration files...

The vulnerability of the Delta Electronics InfraSuite Device Master software in real-time device monitoring, related to errors in code generation, allows a perpetrator to execute arbitrary codes.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by running Lua-based scripts...

The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary codes.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, due to insufficient validation of input data, allows attackers to exploit their privileges.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

WordPress Quiz And Survey Master Plugin <= 8.1.4 is vulnerable to SQL Injection

Software Quiz And Survey Master Type Plugin Vulnerable versions = 8.1.4 Fixed in 8.1.5 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-28787 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 34ea65c01c78 Credits Rafie Muhammad Patchstack Required...

CVE-2023-2097

A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack can be launched...

Sourcecodester Vehicle Service Management System SQL注入漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. SourceCodester Vehicle Service Management System version 1.0 SQL injection vulnerability , the vulnerability stems from the...

CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...

CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...

CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...

PT-2023-17602 · Unknown · Campcodes Online Traffic Offense Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Traffic Offense Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /classes/Master.php. The manipulation of the id argument leads to sql injection. The attack may be...

PT-2023-21280 · Dualspace · Dualspace Lock Master

Name of the Vulnerable Software and Affected Versions: DUALSPACE Lock Master version 2.2.4 Description: An issue in DUALSPACE Lock Master allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: inser...

Campcodes Online Traffic Offense Management System SQL注入漏洞

Campcodes Online Traffic Offense Management System is a web-based traffic offense management system. A SQL injection vulnerability exists in Campcodes Online Traffic Offense Management System v1.0. The vulnerability stems from the lack of validation of external input SQL statements in the paramet...

CVE-2023-27647

CVE-2023-27647 affects DUALSPACE Lock Master v2.2.4. The issue allows a local attacker to cause a denial of service or leak sensitive information via com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of android.net.Uri.insert. Root cause is the insertion pathway in SharedPrefP...

CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...