9 April 2022

7 results · Feed

• Medium 4.3
  CVE-2022-1288

  School Club Application System cross site scripting

  A vulnerability, which was classified as problematic, has been found in School Club Application System 1.0. This issue affects access to /scas/admin/. The manipulation of the parameter page with the input %22%3E%3Cimg%20src=x%20onerror=alert(1)%3E leads to a …

  Apr 9, 2022
• Medium 6.5
  CVE-2022-1287

  School Club Application System resource injection

  A vulnerability classified as critical was found in School Club Application System 1.0. This vulnerability affects a request to the file /scas/classes/Users.php?f=save_user. The manipulation with a POST request leads to privilege escalation. The attack can be…

  Apr 9, 2022
• Unscored —
  CVE-2022-28364

  Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswit…

  Apr 9, 2022
• Unscored —
  CVE-2022-28363 Scanner template

  Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_p…

  Apr 9, 2022
• Unscored —
  CVE-2022-26877

  Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app in…

  Apr 9, 2022
• Unscored —
  CVE-2022-27883

  A link following vulnerability in Trend Micro Antivirus for Mac 11.5 could allow an attacker to create a specially-craf…

  Trend Micro Trend Micro Antivirus for Mac
  Apr 9, 2022
• Unscored —
  CVE-2022-28365 Scanner template

  Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlmin…

  Apr 9, 2022