1948 matches found
CVE-2024-9315 SourceCodester Employee and Visitor Gate Pass Logging System manage_department.php sql injection
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/maintenance/managedepartment.php. The manipulation of the argument id leads to sql injection. The attack may ...
CVE-2024-9315
CVE-2024-9315 affects SourceCodester Employee and Visitor Gate Pass Logging System v1.0. The issue is a SQL injection in the /admin/maintenance/manage_department.php page caused by unsafely handling the id parameter, enabling remote exploitation. Multiple sources confirm the vulnerability details...
Employee and Visitor Gate Pass Logging System SQL注入漏洞
Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in SourceCodester Employee and Visitor Gate Pass Logging System version 1.0, which stems from an SQL injection in the id...
PT-2024-39564 · Sourcecodester · Sourcecodester Employee/Visitor Gate Pass Logging System
Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A critical issue affects the processing of the file /admin/maintenance/manage department.php, where the manipulation of the id argument leads to SQL...
SourceCodester Kortex Lite Advocate Office Management System SQL注入漏洞
SourceCodester Kortex Lite Advocate Office Management System is an office management system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which originates from an SQL injection issue contained in the...
BIT-ENVOY-2024-7207
A flaw was found in Envoy. It is possible to modify or manipulate headers from external clients when pass-through routes are used for the ingress gateway. This issue could allow a malicious user to forge what is logged by Envoy as a requested path and cause the Envoy proxy to make requests to...
openSUSE: Security Advisory for xen (SUSE-SU-2024:3423-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UBUNTU-CVE-2024-31146
When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be guaranteed without knowing internals of any of the involved guests. Therefore such a configuration cannot really be...
CVE-2024-31146 PCI device pass-through with shared resources
When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be guaranteed without knowing internals of any of the involved guests. Therefore such a configuration cannot really be...
SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2024:3423-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3423-1 advisory. - CVE-2024-2201: Mitigation for Native Branch History Injection XSA-456, bsc1222453 - CVE-2024-31143: Fixed double unlock in x86...
SUSE-SU-2024:3423-1 Security update for xen
This update for xen fixes the following issues: - CVE-2024-2201: Mitigation for Native Branch History Injection XSA-456, bsc1222453 - CVE-2024-31143: Fixed double unlock in x86 guest IRQ handling XSA-458, bsc1227355 - CVE-2024-31145: Fixed error handling in x86 IOMMU identity mapping XSA-460,...
Rail Pass Management System 1.0 Insecure Settings
==================================================================================================================================== | Title : Rail Pass Management System 1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0....
CVE-2024-7207
Rejected reason: Duplicate of CVE-2024-45806...
CVE-2024-7207
CVE-2024-7207 is rejected as a duplicate and does not represent an active vulnerability entry.
PT-2024-38168 · Envoy · Envoy
Name of the Vulnerable Software and Affected Versions: Envoy affected versions not specified Description: A flaw was found in Envoy, allowing modification or manipulation of headers from external clients when pass-through routes are used for the ingress gateway. This issue could enable a maliciou...
Bus Pass Management System pass-bwdates-reports-details.php file cross-site scripting vulnerability
Bus Pass Management System is a bus pass management system. Bus Pass Management System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the fromdate and todate parameters in the...
PT-2024-7500 · Realtek · Realtek Sd Card Reader Driver
Name of the Vulnerable Software and Affected Versions: Realtek SD card reader driver versions prior to 10.0.26100.21374 Description: The issue is related to a buffer overflow in the RtsPer.sys driver, which can be exploited by an attacker to write to arbitrary kernel memory locations. This can be...