Archive
14 April 2023
Vulnerabilities first published on this day (UTC), newest first.
48 results · Clear filters · Feed
-
Medium 6.2
Microsoft Defender Security Feature Bypass Vulnerability
Microsoft Defender Security Feature Bypass Vulnerability
-
Medium 6.3
Campcodes Online Traffic Offense Management System view_details.php sql injection
A vulnerability classified as critical has been found in Campcodes Online Traffic Offense Management System 1.0. This affects an unknown part of the file /admin/offenses/view_details.php. The manipulation of the argument id leads to sql injection. It is possi…
-
Medium 6.3
Campcodes Online Traffic Offense Management System Master.php sql injection
A vulnerability was found in Campcodes Online Traffic Offense Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php. The manipulation of the argument id leads to sql injectio…
-
Medium 4.1
vitess allows users to create keyspaces that can deny access to already existing keyspaces
Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace containing `/` characters such that from that point on, anyone who tries to view keyspaces from VTAdmin will receive an e…
-
Medium 5.0
matrix-js-sdk vulnerable to invisible eavesdropping in group calls
matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. An attacker present in a room where an MSC3401 group call is taking place can eavesdrop on the video and audio of participants using matrix-js-sdk, without their knowledge. To affect…
-
Medium 5.5
An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentials
-
Medium 5.5
HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView suppo…
-
Medium 4.3CVE-2023-2059 Scanner template
DedeCMS select_templets.php path traversal
A vulnerability was found in DedeCMS 5.7.87. It has been rated as problematic. Affected by this issue is some unknown functionality of the file uploads/include/dialog/select_templets.php. The manipulation leads to path traversal: '..\filedir'. The attack may …
-
Medium 6.3
DedeCMS module_main.php GetSystemFile code injection
A vulnerability was found in DedeCMS up to 5.7.87 and classified as critical. This issue affects the function GetSystemFile of the file module_main.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been discl…
-
Medium 6.3
Campcodes Advanced Online Voting System positions_delete.php sql injection
A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affects an unknown part of the file /admin/positions_delete.php. The manipulation of the argument id leads to sql injection. It is possible to in…
-
Medium 6.3
Campcodes Advanced Online Voting System candidates_row.php sql injection
A vulnerability, which was classified as critical, has been found in Campcodes Advanced Online Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/candidates_row.php. The manipulation of the argument id leads to sql inje…
-
Medium 6.3
Campcodes Advanced Online Voting System ballot_down.php sql injection
A vulnerability classified as critical was found in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ballot_down.php. The manipulation of the argument id leads to sql injection. The att…
-
Medium 6.3
Campcodes Advanced Online Voting System positions_row.php sql injection
A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of the file /admin/positions_row.php. The manipulation of the argument id leads to sql injection. It is possible to launch th…
-
Medium 6.3
Campcodes Advanced Online Voting System positions_add.php sql injection
A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/positions_add.php. The manipulation of the argument description leads to sql injection. The …
-
Medium 6.3
Campcodes Advanced Online Voting System ballot_up.php sql injection
A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ballot_up.php. The manipulation of the argument id leads to sql injection. The attack can be…
-
Medium 6.3
Campcodes Advanced Online Voting System voters_row.php sql injection
A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/voters_row.php. The manipulation of the argument id leads to sql injection. It is possible to initiat…
-
Medium 6.3
Campcodes Advanced Online Voting System login.php sql injection
A vulnerability was found in Campcodes Advanced Online Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument voter leads to sql injection. The attack may be l…
-
Medium 6.3
Control iD RHiD Edit a sql injection
A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/customerdb/operator.svc/a of the component Edit Handler. The manipulation of the argument email leads to sql injection. …
-
Medium 6.3
DataGear JDBC Server deserialization
A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0. Affected by this issue is some unknown functionality of the component JDBC Server Handler. The manipulation leads to deserialization. The attack may be launche…
-
Medium 6.3
novel-plus sql injection
A vulnerability classified as critical was found in novel-plus 3.6.2. Affected by this vulnerability is an unknown functionality of the file /category/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. The attack …
-
Medium 6.3
novel-plus sql injection
A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack r…
-
Medium 6.3
novel-plus sql injection
A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing of the file /author/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. The attack may be ini…
-
Medium 6.3
Campcodes Video Sharing Website admin_class.php sql injection
A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin_class.php. The manipulation of the argument email leads to sql injection. The attack can be initiated…
-
Medium 6.3
Campcodes Video Sharing Website watch.php sql injection
A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been classified as critical. This affects an unknown part of the file watch.php. The manipulation of the argument code leads to sql injection. It is possible to initiate the attack remot…
-
Medium 6.3
Campcodes Video Sharing Website upload.php sql injection
A vulnerability was found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file upload.php. The manipulation of the argument id leads to sql injection. The attack may be launched re…
-
Medium 6.3
Campcodes Video Sharing Website signup.php sql injection
A vulnerability has been found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file signup.php. The manipulation of the argument id leads to sql injection. The attack can be …
-
Medium 6.1
Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting (XSS) such that the SetClipb…
-
Medium 6.8
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…
-
Medium 6.8
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…
-
Medium 6.1CVE-2023-29623 Scanner template
Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the p…
-
Medium 6.8
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…
-
Medium 6.8
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…
-
Medium 6.8
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…
-
Medium 5.3
Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occ…
-
Medium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulne…
-
Medium 5.4
AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_aut…
-
Medium 6.8
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…
-
Medium 6.8
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exyno…
-
Medium 6.1
Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the name pa…
-
Medium 6.1
An issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. A reflected XSS vulne…