Archive
26 August 2022
Vulnerabilities first published on this day (UTC), newest first.
59 results · Feed
-
Unscored —
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /cla…
-
Unscored —
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /adm…
-
Unscored —
Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /cla…
-
Unscored —
htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component \views\backup.html.ph…
-
Unscored —
mm-wiki v0.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the markdown editor.
-
Unscored —
There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0.
-
Unscored —
An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob…
-
Unscored —
An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstna…
-
Unscored —CVE-2022-34303 Public exploit
A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper wit…
-
Unscored —CVE-2022-34302 Public exploit
A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or…
-
Unscored —CVE-2022-34301 Public exploit
A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass …
-
Unscored —
A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-l…
-
Unscored —
A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs whi…
-
Unscored —
A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory whe…
-
High 7.5
ZK Framework vulnerable to malicious POST
ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader.
KEV Feb 27, 2023 -
Unscored —
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the pa…
-
Medium 6.1
Deluge Web-UI vulnerable to XSS through a crafted torrent file
The Deluge Web-UI is vulnerable to XSS through a crafted torrent file. The the data from torrent files is not properly sanitised as it's interpreted directly as HTML. Someone who supplies the user with a malicious torrent file can execute arbitrary Javascript…
-
Unscored —
A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detect…
-
High 7.5
Undertow vulnerable to Denial of Service (DoS) attacks
A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.