PT-2023-14489 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a possible missing parameters check in the wlan driver, which could lead to a local denial of service in wlan services. Recommendations: At the moment, there is ...

CVE-2022-43693

Concrete CMS is vulnerable to CSRF due to the lack of "State" parameter for external Concrete authentication service for users of Concrete who use the "out of the box" core OAuth...

Library Management System SQL Injection Vulnerability (CNVD-2022-61297)

Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to SQL injection, which stems from a missing parameter id in the file /librarian/bookdetails.php validation of externally...

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to SQL injection, which stems from a missing parameter id in the file /librarian/bookdetails.php validation of externally...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that originates in /vloggersmerch/?p=products&c=missing parameter filtering and escaping, which can be exploited by attackers to conduct SQL injection attacks...

Unspecified vulnerability in YottaDB (CNVD-2022-31927)

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB, which stems from a missing parameter validation in the call to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allowing an attacker to attempt to read from a NULL pointer. No detailed...

Network Olympus SQL注入漏洞

Network Olympus is Softinventive Lab's enterprise network for agentless monitoring. Network Olympus version 1.8.0 is vulnerable to SQL injection, which stems from a missing sqlparameter JSON parameter in /api/eventinstance validation of external input SQL statements. An attacker could exploit thi...

Huawei OxfordS-AN00A Input Validation Error Vulnerability

Huawei OxfordS-AN00A is a smartphone from Huawei China.The Huawei OxfordS-AN00A is vulnerable to an input validation error, which stems from a missing parameter checksum. An attacker could trick users into installing a malicious app, which could modify specific parameters and cause the system to...

The vulnerability of the authenticate function in the services/httpd/handler.go component of the database, related to the deficiencies in the authentication process, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability in the authenticate function of the services/httpd/handler.go component of the database backend, InfluxDB, stems from the lack of a check to ensure that a value is present in the parameter. Exploiting this vulnerability allows an attacker who operates remotely to access...

CVE-2020-18717

SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzztemplate.php...

CVE-2020-16192

LimeSurvey 4.3.2 allows reflected XSS because application/controllers/LSBaseController.php lacks code to validate parameters...

CVE-2020-1771

Attacker is able craft an article with a link to the customer address book with malicious content JavaScript. When agent opens the link, JavaScript code is executed due to the missing parameter encoding. This issue affects: OTRS Community Edition: 6.0.26 and prior versions. OTRS: 7.0.15 and prior...

CVE-2020-1771

Attacker is able craft an article with a link to the customer address book with malicious content JavaScript. When agent opens the link, JavaScript code is executed due to the missing parameter encoding. This issue affects: OTRS Community Edition: 6.0.26 and prior versions. OTRS: 7.0.15 and prior...

CVE-2020-1771: Improper Neutralization of Input During Web Page Generation

Attacker is able craft an article with a link to the customer address book with malicious content JavaScript. When agent opens the link, JavaScript code is executed due to the missing parameter encoding. This issue affects: OTRS Community Edition: 6.0.26 and prior versions. OTRS: 7.0.15 and prior...

CVE-2017-15325

The Bdat driver of Prague smart phones with software versions earlier than Prague-AL00AC00B211, versions earlier than Prague-AL00BC00B211, versions earlier than Prague-AL00CC00B211, versions earlier than Prague-TL00AC01B211, versions earlier than Prague-TL10AC01B211 has integer overflow...

Fedora 27 : xen (2017-333ea49a63)

xen: various flaws 1490884 Missing NUMA node parameter verification XSA-231, CVE-2017-14316 Missing check for grant table XSA-232, CVE-2017-14318 cxenstored: Race in domain cleanup XSA-233, CVE-2017-14317 insufficient grant unmapping checks for x86 PV guests XSA-234, CVE-2017-14319 Note that...

Huawei MHA-AL00A Reboot Vulnerability

Huawei MHA-AL00A is a smartphone product of Huawei, China.Bastet is one of the communication drivers. A security vulnerability exists in Bastet in versions prior to Huawei MHA-AL00A MHA-AL00BC00B231, which stems from a missing parameter check. An attacker can exploit the vulnerability by tricking...

Missing state parameter in OAuth requests leading to CSRF vulnerability

More info at https://github.com/sensiolabs/connect/pull/63...

Elevation of Privilege Vulnerability in Multiple Huawei Phones (CNVD-2016-11306)

Huawei Mate 8, Mate S, P8 are smartphones from Huawei. A security vulnerability in the form of missing parameter checking exists in several Huawei phones. The vulnerability is exploited on the premise that an attacker obtains Graphic or Camera permissions and induces the user to install a malicio...

Elevation of Privilege Vulnerability in Multiple Huawei Phones (CNVD-2016-11305)

Huawei Mate 8, Mate S, P8 are smartphones from Huawei. A security vulnerability in the form of missing parameter checking exists in several Huawei phones. The vulnerability is exploited on the premise that an attacker obtains Graphic or Camera permissions and induces the user to install a malicio...