Archive
12 July 2022
Vulnerabilities first published on this day (UTC), newest first.
186 results · Feed
-
Unscored —
SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authe…
-
Medium 6.8
Command Injection Vulnerability on My Cloud Home
Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute unsigned code on My Cloud Home devices.
-
High 8.0
Protecting AWS credentials stored in plaintext on My Cloud Home
Implemented protections on AWS credentials that were not properly protected.
-
High 8.1
Race Condition in October CMS upload process
October/System is the system module for October CMS, a self-hosted CMS platform based on the Laravel PHP Framework. Prior to versions 1.0.476, 1.1.12, and 2.2.15, when the developer allows the user to specify their own filename in the `fromData` method, an un…
-
Low 3.7
IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols no…
-
Medium 5.3
IBM QRadar Network Security 5.4.0 and 5.5.0 discloses sensitive information to unauthorized users which could be used t…
-
Medium 6.8
IBM QRadar Network Security 5.4.0 and 5.5.0 contains hard-coded credentials, such as a password or cryptographic key, w…
-
Low 3.5
SourceCodester Simple Parking Management System category cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Parking Management System 1.0. This affects an unknown part of the file /ci_spms/admin/category. The manipulation of the argument vehicle_type with the input "><script>al…
-
Low 3.5
SourceCodester Simple Parking Management System cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Parking Management System 1.0. Affected by this issue is some unknown functionality of the file /ci_spms/admin/search/searching/. The manipulation of the argument se…
-
High 7.3
SourceCodester Clinics Patient Management System Login Page index.php sql injection
A vulnerability has been found in SourceCodester Clinics Patient Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pms/index.php of the component Login Page. The manipulation of the argum…
-
Medium 6.3CVE-2022-2297 Public exploit
SourceCodester Clinics Patient Management System unrestricted upload
A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/update_user.php?user_id=1. The manipulation of the argument profile_picture with the input <…
-
Unscored —CVE-2022-29900 Public exploit
Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain mic…
-
High 8.1
AccessKeyID validation bypass
A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges.
-
Medium 5.4
Cross-site Scripting (XSS)
The package svelte before 3.49.0 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization and to improper escape of attributes when using objects during SSR (Server-Side Rendering). Exploiting this vulnerability is possible via objects …
-
Medium 5.4
Cross-site Scripting (XSS)
The package whoogle-search before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via the query string parameter q. In the case where it does not contain the http string, it is used to build the error_message that is then rendered in the error.html templat…
-
Low 3.5
SourceCodester Simple Sales Management System create cross site scripting
A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ci_ssms/index.php/orders/create. The manipulation of the argument customer_name w…
-
Low 3.5
SourceCodester Hotel Management System Room Edit Page 1 cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /ci_hms/massage_room/edit/1 of the component Room Edit Page. The manipulation of the argument massageroomDetail…
-
Medium 4.3
SourceCodester Hotel Management System Search search cross site scripting
A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /ci_hms/search of the component Search. The manipulation of the argument search with the input ">…
-
Medium 4.7
Online Hotel Booking System Room edit_room_cat.php sql injection
A vulnerability was found in Online Hotel Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file edit_room_cat.php of the component Room Handler. The manipulation of the argument roomname leads to sql i…
-
Medium 4.7
Online Hotel Booking System Room edit_all_room.php sql injection
A vulnerability has been found in Online Hotel Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file edit_all_room.php of the component Room Handler. The manipulation of the argument id with the …
-
Unscored —
An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allo…
-
High 8.4
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions <…
-
Critical 10.0
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions <…
-
Unscored —
A vulnerability has been identified in Simcenter Femap (All versions < V2022.2). The affected application contains an o…
-
High 8.0
A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i8…
-
Unscored —
A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mend…
-
Unscored —
A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Appli…
-
Unscored —
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.…
-
Medium 6.3
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3). The affected application uses …
-
Unscored —
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a st…
-
Unscored —
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a st…
-
Unscored —
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an o…
-
Unscored —
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable…
-
Unscored —
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a st…
-
Unscored —
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an o…
-
Unscored —
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable…
-
Unscored —
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an o…
-
Unscored —
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable…
-
Unscored —
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable…
-
Unscored —
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable…