Archive
29 December 2023
Vulnerabilities first published on this day (UTC), newest first.
70 results · Clear filters · Feed
-
Medium 6.3
SourceCodester Free and Open Source Inventory Management System edit_product.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Free and Open Source Inventory Management System 1.0. This affects an unknown part of the file /ample/app/action/edit_product.php. The manipulation of the argument id leads to sql …
-
Medium 5.5
MicroPython modselect.c poll_set_add_fd use after free
A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manipulation leads to use after free. The exploit has been discl…
-
Medium 4.7
Campcodes Chic Beauty Salon Product product-list.php unrestricted upload
A vulnerability classified as critical was found in Campcodes Chic Beauty Salon 20230703. Affected by this vulnerability is an unknown functionality of the file product-list.php of the component Product Handler. The manipulation leads to unrestricted upload. …
-
Medium 4.4
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause i…
-
Medium 6.0
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause i…
-
Medium 4.6
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
-
Medium 4.6
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
-
Medium 4.6
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
-
Medium 4.0
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.
-
Medium 4.6
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
-
Medium 4.6
Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
-
Medium 6.0
Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information l…
-
Medium 4.0
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause d…
-
Medium 5.0
ShifuML shifu Java Expression Language DataPurifier.java code injection
A vulnerability has been found in ShifuML shifu 0.12.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file src/main/java/ml/shifu/shifu/core/DataPurifier.java of the component Java Expression Language Handler. Th…
-
Medium 4.0
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause d…
-
Medium 6.6
Some Honor products are affected by file writing vulnerability, successful exploitation could cause information disclos…
-
Medium 6.5
Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution
-
Medium 4.0
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information…
-
Medium 6.3
gopeak MasterLab User.php base64ImageContent unrestricted upload
A vulnerability, which was classified as critical, was found in gopeak MasterLab up to 3.3.10. Affected is the function base64ImageContent of the file app/ctrl/User.php. The manipulation of the argument image leads to unrestricted upload. It is possible to la…
-
Medium 4.0
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause d…
-
Medium 4.0
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged …
-
Medium 4.0
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information…
-
Medium 6.3
gopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete sql injection
A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the …
-
Medium 4.0
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged …
-
Medium 6.3
gopeak MasterLab HTTP POST Request Framework.php sqlInject sql injection
A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10. This vulnerability affects the function sqlInject of the file app/ctrl/Framework.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to s…
-
Medium 6.3
gopeak MasterLab HTTP POST Request Feature.php sqlInject sql injection
A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10. This affects the function sqlInject of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to sq…
-
Medium 4.3
code-projects Client Details System clientview.php sql injection
A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientview.php. The manipulation of the argument ID leads to sql injection…
-
Medium 5.5
JLine vulnerable to out of memory error
An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.
-
Medium 5.3
CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows attackers …
-
Medium 5.5
An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obt…