PT-2023-18819 · Craig Rodway · Classroombookings

Name of the Vulnerable Software and Affected Versions: craigrodway classroombookings version 2.6.4 Description: The issue is related to a Cross Site Scripting XSS vulnerability, which allows attackers to execute arbitrary code or cause other unspecified impacts. This is achieved via the input bgc...

PT-2023-15543 · Ibm · Vios +1

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: A buffer overflow vulnerability in X11 could allow a non-privileged local user to cause a denial of service or achieve arbitrary code execution. Recommendations: For IBM AIX...

PT-2023-1200 · Oracle · Oracle Web Applications Desktop Integrator

Name of the Vulnerable Software and Affected Versions: Oracle Web Applications Desktop Integrator versions 12.2.3 through 12.2.12 Description: The issue is related to insufficient input validation in the Download component of Oracle Web Applications Desktop Integrator, part of the Oracle E-Busine...

PT-2023-33264 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue concerns error handling in the fm10k init module function. It was introduced in version v3.18 and is fixed in Linux Kernel version v5.15.82. The actual impact and attack...

PT-2025-13341 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fix of the instruction simulation of JALR Description: The issue is related to the instruction simulation of JALR in the Linux kernel, specifically when setting a kprobe at 'jalr 1140ra' of vfs write. This...

CVE-2015-10051 bony2023 Discussion-Board main.php display_all_replies sql injection

A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...

CVE-2021-4310 01-Scripts 01-Artikelsystem 01article.php cross site scripting

A vulnerability was found in 01-Scripts 01-Artikelsystem. It has been classified as problematic. Affected is an unknown function of the file 01article.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. It is possible to launch the attack remotely. The patch is...

PT-2023-14412 · Linksys · Linksys Wrt54Gl Wireless-G Broadband Router

Name of the Vulnerable Software and Affected Versions: Linksys WRT54GL Wireless-G Broadband Router versions = 4.30.18.006 Description: A buffer overflow issue exists, allowing an authenticated attacker with administrator privileges to execute arbitrary commands on the underlying Linux operating...

CVE-2007-10002 web-cyradm auth.inc.php sql injection

A vulnerability, which was classified as critical, has been found in web-cyradm. Affected by this issue is some unknown functionality of the file auth.inc.php. The manipulation of the argument login/loginpassword/LANG leads to sql injection. The attack may be launched remotely. The name of the...

PT-2023-10112 · Unknown · Networkmanager

Name of the Vulnerable Software and Affected Versions: vicamo NetworkManager affected versions not specified Description: A vulnerability was found in vicamo NetworkManager, affecting the function nm setting vlan add priority str/nm utils rsa key encrypt/nm setting vlan add priority str. The...

CVE-2015-10007 82Flex WEIPDCRM cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in 82Flex WEIPDCRM and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is...

PT-2022-28019 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A stack overflow issue was discovered in the security parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda A15 version 15.13.07.13, consider restricting access to the...

CVE-2021-4290 DHBW Fallstudie Login passport.js sql injection

A vulnerability was found in DHBW Fallstudie. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file app/config/passport.js of the component Login. The manipulation of the argument id/email leads to sql injection. The name of the patch is...

CVE-2021-4263 leanote history.js define cross site scripting

A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...

CVE-2021-4267 tad_discuss cross site scripting

A vulnerability classified as problematic was found in taddiscuss. Affected by this vulnerability is an unknown functionality. The manipulation of the argument DiscussTitle leads to cross site scripting. The attack can be launched remotely. The name of the patch is...

CVE-2021-4258

A vulnerability was found in whohas. It has been rated as problematic. This issue affects some unknown processing of the component Package Information Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be initiated remotely. The real existence of th...

CVE-2020-36618

CVE-2020-36618 affects Furqan node-whois. Affected is an unknown function in the file index.coffee; the issue enables prototype pollution through manipulation of object prototype attributes. The vulnerability can be exploited remotely, as indicated by the original description, and is considered c...

PT-2022-27686 · Unknown · Luckyshot Crmx

Name of the Vulnerable Software and Affected Versions: luckyshot CRMx affected versions not specified Description: A critical issue was found in luckyshot CRMx, affecting the get/save/delete/comment/commentdelete function of the index.php file. This issue leads to SQL injection and can be initiat...

PT-2022-27697 · Unknown · Django-Openipam

Name of the Vulnerable Software and Affected Versions: django-openipam affected versions not specified Description: A problematic vulnerability has been found in django-openipam, affecting an unknown part of the file openipam/report/templates/report/exposed hosts.html. The manipulation of the...

PT-2022-11610 · Unknown · Ctrlo Lenio

Name of the Vulnerable Software and Affected Versions: ctrlo lenio affected versions not specified Description: A vulnerability has been found in ctrlo lenio, classified as problematic, affecting an unknown functionality of the file views/layouts/main.tt of the component Notice Handler. The...