814 matches found
CVE-2022-36577
An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin...
CVE-2022-35603
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt...
CVE-2022-38130
creationtimestamp| type| source ---|---|--- 2022-08-11 00:26:35+00:00| seen| https://t.me/cibsecurity/47904 2024-11-16 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-16 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...
PT-2022-4147 · Siemens · Scalance W-700 +9
Name of the Vulnerable Software and Affected Versions: SCALANCE M-800 / S615 versions prior to V2.3.1 SCALANCE SC-600 family versions prior to V2.3.1 SCALANCE W-1700 IEEE 802.11ac family versions prior to V2.3.1 SCALANCE W-700 IEEE 802.11ax family versions prior to V2.3.1 SCALANCE W-700 IEEE...
CVE-2022-31173 Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow
Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should limit the recursion depth manually...
CVE-2022-2324
creationtimestamp| type| source ---|---|--- 2022-07-30 00:13:57+00:00| seen| https://t.me/cibsecurity/47300...
CVE-2022-35632
creationtimestamp| type| source ---|---|--- 2022-07-29 20:13:41+00:00| seen| https://t.me/cibsecurity/47266...
CVE-2022-34650
creationtimestamp| type| source ---|---|--- 2022-07-22 20:23:44+00:00| seen| https://t.me/cibsecurity/46836...
CVE-2022-21567
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of...
CVE-2022-21567
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of...
CVE-2022-21568
Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite component: Access Request. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables. Successfu...
CVE-2021-31677
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords...
PESCMS 跨站请求伪造漏洞
PESCMS is a content publishing platform. A security vulnerability exists in PESCMS version V2.3.3. An attacker exploited the vulnerability to delete the accounts of admin and other members...
IBM CloudPak for Multicloud Monitoring 安全漏洞
IBM CloudPak for Multicloud Monitoring is an open hybrid cloud management platform from IBM USA. A security vulnerability exists in IBM CloudPak for Multicloud Monitoring versions 2.0 through 2.3 that stems from vulnerability to host information leakage or corruption...
CVE-2022-34174
In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, when using the Jenkins user database security realm...
CVE-2022-34012
Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business.Online Ordering System version v2.3.2 is vulnerable to SQL injection, which originates from /ordering/index.php?q=category&search=Lack of validation of external input SQL statement validation, an attack...
PT-2022-21862 · Ca · Ca Automic Automation
Name of the Vulnerable Software and Affected Versions: CA Automic Automation versions 12.2 through 12.3 Description: The issue is related to insecure memory handling in the Automic agent, which could allow a remote attacker to potentially access sensitive data. Recommendations: For CA Automic...