4060 matches found
VulnCheck KEV: CVE-2022-26522
Avast Anti Rootkit kernel driver user controlled length in aswArPot+0xc4a3...
VulnCheck KEV: CVE-2022-26523
Avast Anti Rootkit kernel driver user controlled length in aswArPot+0xbb94...
CVE-2022-2808
Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. This issue affects Prens Student Information System: before 2.1.11...
CVE-2022-2808
Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection.This issue affects Prens Student Information System: before 2.1.11...
Authorization
Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection.This issue affects Prens Student Information System: before 2.1.11...
PT-2022-18798 · Algan · Algan Software Prens Student Information System
Name of the Vulnerable Software and Affected Versions: Algan Software Prens Student Information System versions prior to 2.1.11 Description: The issue allows for Object Relational Mapping Injection due to an Authorization Bypass Through User-Controlled Key vulnerability. It also involves an...
urijs: Authorization Bypass Through User-Controlled Key
A flaw was found in urijs due to the fix of CVE-2021-3647 not considering case-sensitive protocol schemes in the URL. This issue allows attackers to bypass the patch...
CVE-2022-3282: Authorization Bypass Through User-Controlled Key
The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.5 does not properly check for the upload size limit set in forms, taking the value from user input sent when submitting the form. As a result, attackers could control the file length limit and bypass the limit set by admins in t...
CVE-2022-42067: Authorization Bypass Through User-Controlled Key
Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference IDOR vulnerability...
Server-side Request Forgery (SSRF)
discovery-plugin-admin-center-starter is vulnerable to server-side request forgery. The vulnerability exists in the routerRestTemplate.getForEntity functionality in the getRouterEntityList function of RouterResourceImpl.java, allowing an attacker to gain sensitive information through the URLs...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via a crafted request sent to the /admin/users/userid/memberships/membershipid endpoint containing an additional membershipentityid parameter. This will allow an attacker to update the...
Cross site scripting
SAP NetWeaver Enterprise Portal KMC - version 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability. KMC servlet is vulnerable to XSS attack. The execution of script content by a victim registered on the portal could compromise the...
ASB-A-238379819
a function called 'nlaparse', do not check the len of para, it will check nlatype which can be controlled by userspace with 'maxtype' in this case, it is GSCANMAX, then it access polciy array 'policytype', which OOB access happens...
CVE-2022-2824
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2824 Authorization Bypass Through User-Controlled Key in openemr/openemr
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2824
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...
PT-2022-18902 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.1 Description: The issue is related to improper access control, specifically an authorization bypass through a user-controlled key. This allows unauthorized access to certain resources. Recommendations: For...
CVE-2022-2824: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...