Archive

12 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /12 October 2022 →

All Critical High Medium Low Exploited only Public exploit

49 results · Feed

Unscored —

CVE-2022-36259

A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to e…

Sep 12, 2022
Unscored —

CVE-2022-36258

A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute…

Sep 12, 2022
Unscored —

CVE-2022-36257

A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arb…

Sep 12, 2022
Unscored —

CVE-2022-36256

A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbi…

Sep 12, 2022
Unscored —

CVE-2022-36255

A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute…

Sep 12, 2022
Unscored —

CVE-2022-36254

Multiple persistent cross-site scripting (XSS) vulnerabilities in index.php in tramyardg Hotel Management System 1.0 al…

Sep 12, 2022
Unscored —

CVE-2022-38972

Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) an…

ARK-Web A-Form

Sep 12, 2022
Unscored —

CVE-2022-37797

In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket h…

lighttpd lighttpd Debian Ubuntu

Sep 12, 2022
Critical 9.8

CVE-2022-37767

Pebble Templates protection mechanism bypass can lead to arbitrary code execution

Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with springbok. NOTE: the vendor disputes this because input to the Pebble templating engine is intended to include arbitrary Java code, and thus e…

io.pebbletemplates:pebble Maven

Sep 12, 2022