Archive
18 August 2022
Vulnerabilities first published on this day (UTC), newest first.
130 results · Feed
-
Medium 6.3
SourceCodester Student Management System index.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Student Management System. Affected is an unknown function of the file index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack re…
-
Unscored —
Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated…
-
Unscored —
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows remote attackers…
-
Unscored —
Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated…
-
Unscored —
Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated a…
-
Unscored —
HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alte…
-
Unscored —
Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated atta…
-
Unscored —
Information disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8.5 allows a remote atta…
-
Unscored —
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacke…
-
Unscored —
Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated at…
-
Unscored —
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary sc…
-
Unscored —
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacke…
-
Unscored —
Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated at…
-
Unscored —
Contract Management System v2.0 contains a weak default password which gives attackers to access database connection in…
-
Unscored —
An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset du…
-
Unscored —
libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal.
-
Unscored —
An issue in AP4_SgpdAtom::AP4_SgpdAtom() of Bento4-1.6.0-639 allows attackers to cause a Denial of Service (DoS) via a …
-
Unscored —
LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain.
-
Unscored —
Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter.
-
Unscored —
A cross-site scripting (XSS) vulnerability in /admin/list_key.html of HestiaCP before v1.3.5 allows attackers to execut…
-
Unscored —
FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php.
-
Unscored —
An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values tak…
-
Unscored —
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute…
-
Unscored —
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arb…
-
Unscored —
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute…
-
Unscored —
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arb…
-
Unscored —
A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute…
-
Unscored —
A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbi…
-
Unscored —
A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers t…
-
Medium 6.8
Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated u…
-
High 7.0
Remote denial of service in Hyperledger Fabric Gateway
Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. Version 2.4.6 checks for the…
-
Unscored —
A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least on…
-
Medium 6.6
NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.
-
Critical 9.8
Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated …
-
Medium 5.5
Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user t…
-
High 8.0
Improper neutralization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user…
-
High 7.8
Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged us…
-
High 7.8
Improper buffer restrictions for some Intel(R) NUC 9 Extreme Laptop Kit drivers before version 2.2.0.22 may allow an au…
-
Medium 5.5
Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable in…
-
Unscored —
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at…