Book Store Management System 信任管理问题漏洞

Book Store Management System is an online bookstore system by Carlo Montero, an individual developer. A security vulnerability exists in Book Store Management System v1.0, which stems from its use of hard-coded credentials that allow an attacker to elevate privileges and access the administration...

PT-2022-27117 · Unknown · Zenario Cms

Name of the Vulnerable Software and Affected Versions: Zenario CMS version 9.3.57186 Description: The issue concerns Remote Code Execution RCE, which allows an attacker to execute arbitrary code on the affected system. Recommendations: For Zenario CMS version 9.3.57186, at the moment, there is no...

SUSE-SU-2022:4283-1 Security update for webkit2gtk3

Security fixes: - CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafted web content bsc1205121. - CVE-2022-32923: Fixed possible information leak via maliciously crafted web content bsc1205122. - CVE-2022-42799: Fixed user interface spoofing when visiting a malicious...

PT-2022-27210 · Unknown · Poultry Farm Management System

Name of the Vulnerable Software and Affected Versions: Poultry Farm Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the del parameter at the "/Redcock-Farm/farm/category.php" API endpoint. Recommendations: F...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:10219-1 Rating: important References: Cross-References: CVE-2022-3723 CVSS scores: CVE-2022-3723 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4:NonFree An update tha...

CVE-2022-45872

iTerm2 before 3.4.18 mishandles a DECRQSS response...

ADC-13.0-Issue is with unable to upgrade ADC VPX

During Upgrade of VPX you are faced with error message, "License server version 11.14.0.2 not compatible with client version 11.16.6.0 Either upgrade the ADM to ensure that it is running", during upgrade process...

PT-2022-27310 · Unknown · Appalti & Contratti

Name of the Vulnerable Software and Affected Versions: Appalti & Contratti version 9.12.2 Description: The web application is vulnerable to a Reflected Cross-Site Scripting issue. The idPagina parameter is reflected inside the server response without any HTML encoding, resulting in XSS when the...

EUVD-2022-0019

In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's /login endpoint...

PT-2022-36764 · Git +1 · Opensis

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap buffer overflow error, specifically a READ 1 type crash. The crash occurs in the following functions: parse content length...

CVE-2022-27874

Improper authentication in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access...

Intel PROSet Wireless WiFi Software Advisory - Lenovo Support US

No description provided...

CVE-2022-43995

Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer...

PT-2022-26748 · Unknown · Restaurant Pos System

Name of the Vulnerable Software and Affected Versions: Restaurant POS System version 1.0 Description: The issue is related to a SQL injection vulnerability. It affects the update customer.php file. Recommendations: For Restaurant POS System version 1.0, consider restricting access to the update...

Ultimate Member < 2.5.1 - Admin+ LFI via Traversal

The plugin does not validate and sanitize the pack parameter before using it in an include statement, which could allow high privilege users to perform local file inclusion attacks via a Traversal vector...

CVE-2022-41702

The affected product DIAEnergie versions prior to v1.9.01.002 is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API...

PT-2022-22961 · Sourcecodester · Sourcecodester Cashier Queuing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Cashier Queuing System version 1.0 Description: A critical issue was found in the Login Page component, specifically in the /queuing/login.php file. The manipulation of the username and password arguments leads to SQL injection...

Race condition

HIWIN Robot System Software version 3.3.21.9869 does not properly address the terminated command source. As a result, an attacker could craft code to disconnect HRSS and the controller and cause a denial-of-service condition...

OPENSUSE-SU-2022:10151-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 106.0.5249.119 boo1204223: CVE-2022-3445: Use after free in Skia CVE-2022-3446: Heap buffer overflow in WebSQL CVE-2022-3447: Inappropriate implementation in Custom Tabs CVE-2022-3448: Use after free in Permissions API CVE-2022-3449: U...

PT-2022-26056 · Jhead +3 · Jhead +3

Name of the Vulnerable Software and Affected Versions: Jhead version 3.06.0.1 Description: The issue allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option. Recommendations: For Jhead version 3.06.0.1, consider avoiding t...