3622 matches found
CVE-2022-48114
RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable...
CVE-2023-24163
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine...
CVE-2022-43979 Path Traversal leading to Local File Inclusion
There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that the parameter that the user has inserted does not contain malicious characteres, but this check is insufficient. An attacker could insert an absolute path to overcome the heck,...
CVE-2022-47105
Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData...
PT-2023-11726 · Hewlett Packard · Hpe
Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: The issue concerns a vulnerability that was initially assigned a CVE number but was unused by HPE. The details of this issue are available via the National Vulnerability Database...
PT-2023-11935 · Hewlett Packard · Hpe
Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: The issue concerns a vulnerability that was initially assigned a CVE number but was unused by HPE. The details of this issue are available via the National Vulnerability Database...
PT-2023-12370 · Hewlett Packard · Hpe
Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: The issue concerns a vulnerability that was initially assigned a CVE number but was unused by HPE. The details about this issue are available via the National Vulnerability Database...
CVE-2014-125035 Jobs-Plugin cross site scripting
A vulnerability classified as problematic was found in Jobs-Plugin. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier of the patch is b8a56718b1d42834c6ec51d9c489c5dc20471d7b. It is...
CVE-2022-46534
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the speeddir parameter at /goform/SetSpeedWan...
Fuji Electric Tellus Lite V-Simulator
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Fuji Electric Equipment: Tellus Lite V-Simulator Vulnerabilities: Out-of-bounds Write, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute...
CVE-2022-4593 retra-system cross site scripting
A vulnerability was found in retra-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is a6d94ab88f4a6f631a14c59b72461140fb57ae1f. It is recommended to...
CVE-2022-4602 Shoplazza LifeStyle Review Flow cross site scripting
A vulnerability was found in Shoplazza LifeStyle 1.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/api/theme-edit/ of the component Review Flow Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...
CVE-2022-46351
A vulnerability has been identified in SCALANCE X204RNA HSR All versions V3.2.7, SCALANCE X204RNA PRP All versions V3.2.7, SCALANCE X204RNA EEC HSR All versions V3.2.7, SCALANCE X204RNA EEC PRP All versions V3.2.7, SCALANCE X204RNA EEC PRP/HSR All versions V3.2.7. Specially crafted PROFINET DCP...
CVE-2022-27518 Unauthenticated remote arbitrary code execution
Unauthenticated remote arbitrary code execution...
CVE-2021-4244 yikes-inc-easy-mailchimp-extender Plugin add_field_to_form.php cross site scripting
A vulnerability classified as problematic has been found in yikes-inc-easy-mailchimp-extender Plugin up to 6.8.5. This affects an unknown part of the file admin/partials/ajax/addfieldtoform.php. The manipulation of the argument fieldname/mergetag/fieldtype/listid leads to cross site scripting. It...
CVE-2022-43515
Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any user will not be able to access the Zabbix Frontend while it is being maintained and possible sensitive data will be prevented from being...
CVE-2022-45207
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString...
Security update for Botan (moderate)
openSUSE Security Update: Security update for Botan Announcement ID: openSUSE-SU-2022:10210-1 Rating: moderate References: 1205509 Cross-References: CVE-2022-43705 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes one vulnerability is now available. Description: This update fo...