CVE-2022-32283

Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Cabinet via unspecified vectors...

CVE-2022-32283

CVE-2022-32283 affects Cybozu Office (Cabinet component) from version 10.0.0 through 10.8.5. It is described as a browse restriction bypass vulnerability (CWE-284) that allows a remote authenticated attacker to obtain Cabinet data via unspecified vectors. The issue is tied to Cabinet access contr...

CVE-2022-25986

Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler...

CVE-2022-25986

Summary: CVE-2022-25986 is a browse restriction bypass in the Scheduler of Cybozu Office. Affected versions: Cybozu Office 10.0.0 to 10.8.5. Impact: A remote authenticated attacker may obtain data from the Scheduler due to improper access restrictions in the Scheduler component (data disclosure)....

PT-2022-9949 · Hestiacp · Hestiacp

Name of the Vulnerable Software and Affected Versions: HestiaCP versions prior to 1.3.5 Description: A cross-site scripting XSS issue in the "/admin/list key.html" endpoint allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For versions prior to 1.3....

PT-2022-17623 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: A browse restriction bypass issue in the Scheduler component allows a remote authenticated attacker to obtain Scheduler data. Recommendations: For Cybozu Office versions 10.0.0 through...

PT-2022-23586 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: A SQL injection issue was found in the Library Management System via the bookId parameter at the "/staff/delete.php" API endpoint. Recommendations: For Library Management System version 1.0,...

PT-2022-22631 · Vitejs · Vite

Name of the Vulnerable Software and Affected Versions: Vitejs Vite versions prior to 2.9.13 Description: The issue allows attackers to perform a directory traversal via a crafted URL to the victim's service. This can be achieved by sending a specifically designed URL to the victim's service,...

CVE-2022-37060

The CVE-2022-37060 entry relates to Teledyne FLIR AX8 thermal sensor cameras affected up to firmware version 1.46.16. A directory traversal flaw arises from improper access restrictions, allowing an unauthenticated, remote attacker to disclose files outside the restricted server path by sending c...

PT-2022-19897 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: A browse restriction bypass issue in the Custom App of Cybozu Office allows a remote authenticated attacker to obtain Custom App data via unspecified vectors. Recommendations: For Cybo...

PT-2022-17167 · Candidats · Candidats

Name of the Vulnerable Software and Affected Versions: CandidATS version 3.0.0 Beta Description: The issue allows an authenticated user to inject SQL queries through specific API endpoints, including '/index.php?m=settings&a=show' via the userID parameter, '/index.php?m=candidates&a=show' via the...

PT-2022-23585 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the M Id parameter at the "/student/dele.php" API endpoint. Recommendations: For Library...

PT-2022-23584 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the title parameter at the "/librarian/history.php" API endpoint. Recommendations: For Library...

PT-2022-21205 · Cybozu · Cabinet Of Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cabinet of Cybozu Office versions 10.0.0 through 10.8.5 Description: A browse restriction bypass issue allows a remote authenticated attacker to obtain Cabinet data via unspecified vectors. Recommendations: For versions 10.0.0 through 10.8.5,...

PT-2022-22633 · Unknown · Ecommerce-Codeigniter-Bootstrap

Name of the Vulnerable Software and Affected Versions: Ecommerce-CodeIgniter-Bootstrap versions before commit 56465f Description: A cross-site scripting XSS issue was found in the function base url at the /blog/blogpublish.php endpoint. This allows for potential exploitation. Recommendations: For...

PT-2022-22919 · Unknown · Sazanrjb Inventorymanagementsystem

Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue in CustomerDAO.java allows attackers to execute arbitrary SQL commands via the searchTxt parameter. This enables unauthorized access and manipulation of databas...

CVE-2022-37060

FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restriction. An unauthenticated, remote attacker can exploit this by sending a URI that contains directory traversal characters to disclose the contents of files...

The vulnerability of the Passwork password manager, related to incorrect restrictions on the path to the restricted catalog, allows a violator to upload any files into the system.

The vulnerability of the Passwork password manager is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to upload arbitrary files into the system remotely...

PT-2022-10857 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.0.3.5 IBM Sterling B2B Integrator Standard Edition versions 6.1.0.0 through 6.1.0.4 IBM Sterling B2B Integrator Standard Edition versions 6.1.1.0 through 6.1.1.1...

PT-2022-22647 · Unknown · Solarview Compact Sv-Cpt-Mc310

Name of the Vulnerable Software and Affected Versions: SolarView Compact SV-CPT-MC310 versions 7.23 and earlier SolarView Compact SV-CPT-MC310F versions 7.23 and earlier Description: The image file management page contains an insufficient verification issue when uploading files. This can be...