Archive
1 June 2022
Vulnerabilities first published on this day (UTC), newest first.
113 results · Feed
-
Unscored —
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/manage_vehicle.php?id=.
-
Unscored —
Online Car Wash Booking System v1.0 by oretnom23 has SQL injection via /ocwbs/admin/services/manage_price.php?id=.
-
Unscored —
Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manage_service.php?id=.
-
Unscored —
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/view_service.php?id=.
-
Unscored —
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=get_vehicle_service.
-
Unscored —
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php.
-
Unscored —
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.
-
Unscored —
Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via …
-
Unscored —
Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via…
-
Unscored —
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /check…
-
Unscored —
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fi…
-
Unscored —
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fi…
-
Unscored —
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files wi…
-
Unscored —
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file uploa…
-
Unscored —
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fi…
-
Unscored —
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-b…
-
Unscored —
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license fi…
-
Unscored —
A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions < VJ30C-UD01), MAGNETOM Famil…
-
High 8.3
Server-Side Request Forgery (SSRF) in gogs/gogs
Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.8.
-
Unscored —
libdwarf 0.4.0 has a heap-based buffer over-read in _dwarf_check_string_valid in dwarf_util.c.
-
Unscored —
In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.
-
Unscored —
In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp.
-
Unscored —CVE-2021-44080 EPSS 25%
A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logge…
-
Unscored —
Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court_rentals/…
-
Unscored —
A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers …
-
Medium 5.3
The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, m…
-
High 7.5
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address th…
-
Unscored —
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header…
-
High 7.5
libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should h…
-
Unscored —
libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.c…
-
Medium 5.7
An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that c…
-
High 7.5
libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's …
-
Unscored —
Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step e…