Archive
7 October 2022
Vulnerabilities first published on this day (UTC), newest first.
117 results · Feed
-
Unscored —
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet…
-
Unscored —
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…
-
Unscored —
An arbitrary file upload vulnerability in the component /php_action/editFile.php of Online Diagnostic Lab Management Sy…
-
Unscored —
An arbitrary file upload vulnerability in the component /leave_system/classes/Users.php?f=save of Online Leave Manageme…
-
Unscored —
PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function…
-
Unscored —
A cross-site scripting (XSS) vulnerability in TotalJS commit 8c2c8909 allows attackers to execute arbitrary web scripts…
-
Unscored —
An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups…
-
Unscored —
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/a…
-
Medium 5.3
Liferay Portal Insecure Default Configuration in auth.login.prompt.enabled
An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers to enumerate usernames, site names, and pages.
-
Unscored —
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pet_shop/a…
-
Unscored —
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter a…
-
Unscored —
Wedding Planner v1.0 is vulnerable to arbitrary code execution.
-
Unscored —
Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=.
-
High 7.2CVE-2022-42092 Public exploit
Backdrop CMS Unrestricted File Upload vulnerability
Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.
-
Unscored —
Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=.
-
Unscored —
An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba Instan…
-
Unscored —
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interfac…
-
Unscored —
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote cod…
-
Unscored —
A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow an unauthenticated remote at…
-
Unscored —
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote cod…
-
Unscored —
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote cod…
-
Unscored —
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote cod…
-
Unscored —
An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. S…
-
Unscored —
A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a remote attacker to conduct…
-
Unscored —
An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba Instan…
-
Unscored —
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interfac…
-
Unscored —
In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local esc…
-
Unscored —
In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalatio…
-
Unscored —
In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privile…
-
Unscored —
In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Unscored —
In sensorhub, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead t…
-
Unscored —
In isp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wi…
-
Unscored —
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Ima…
-
Unscored —
A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has…
-
Unscored —
A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploit…
-
Unscored —
A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond t…
-
Unscored —
A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond …