4767 matches found
CVE-2024-48570
Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...
Client Management System SQL注入漏洞
Client Management System is a system for managing customer relationships by an individual Indian developer Haneen Gufran. A security vulnerability exists in Client Management System version 1.0 that originates from SQL injection in the Between Dates Reports parameter of the...
CVE-2024-48570
CVE-2024-48570 affects Client Management System 1.0. A SQL injection vulnerability exists in the Between Dates Reports parameter of the /admin/bwdates-reports-ds.php endpoint. The CVSS 3.1 base score is 7.5 (High) with Confidentiality impact High; no integrity/availability impact described. Conne...
PT-2024-33150 · Unknown · Client Management System
Name of the Vulnerable Software and Affected Versions: Client Management System version 1.0 Description: A SQL injection issue was discovered in the Client Management System via the Between Dates Reports parameter at the "/admin/bwdates-reports-ds.php" API endpoint. Recommendations: For Client...
CVE-2024-48570
Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...
CVE-2024-50042 ice: Fix increasing MSI-X on VF
In the Linux kernel, the following vulnerability has been resolved: ice: Fix increasing MSI-X on VF Increasing MSI-X value on a VF leads to invalid memory operations. This is caused by not reallocating some arrays. Reproducer: modprobe ice echo 0 /sys/bus/pci/devices/$PFPCI/sriovdriversautoprobe...
CVE-2024-50015 ext4: dax: fix overflowing extents beyond inode size when partially writing
In the Linux kernel, the following vulnerability has been resolved: ext4: dax: fix overflowing extents beyond inode size when partially writing The daxiomaprw does two things in each iteration: map written blocks and copy user data to blocks. If the process is killed by userSee signal handling in...
CVE-2024-21284
Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications component: Reports. The supported version that is affected is 14.5.0.12.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2024-21285
Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications component: Reports. The supported version that is affected is 14.5.0.12.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2024-21284
Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications component: Reports. The supported version that is affected is 14.5.0.12.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2024-21285
Oracle Banking Liquidity Management (Oracle Financial Services Applications) is affected in version 14.5.0.12.0, specifically the Reports component. The issue allows a low-privilege, network-access attacker (HTTP) to compromise the system, with human interaction required, potentially resulting in...
CVE-2024-9973
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=reports of the component Report Viewing Page. The manipulation of the argument date leads to sql injection. It is possible to launch th...
SourceCodester Online Eyewear Shop SQL注入漏洞
SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for eyewear business and its potential customers. A SQL injection vulnerability exists in SourceCodester...
PT-2024-39971 · Unknown · Sourcecodester Online Eyewear Shop
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A critical issue was found in the Report Viewing Page component, specifically in the file /admin/?page=reports. The manipulation of the date argument leads to SQL injection. This iss...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper user input sanitization. An attacker can manipulate scripts in the user's browser by injecting malicious code into editable content areas. Exploiting this vulnerability is possible if the user ha...
CVE-2024-47815 Cross-site Scripting in IncidentReporting
IncidentReporting is a MediaWiki extension for moving incident reports from wikitext to database tables. There are a variety of Cross-site Scripting issues, though all of them require elevated permissions. Some are available to anyone who has the editincidents right, some are available to those w...
CVE-2024-9680
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1, Thunderbird...
Malicious code in steampipe-reports (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da60e6d3d0eabe3a13ee33ff083b62e33e8c5dd6a42852a73061c0ce975fa140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...