‼ CVE-2022-29539 ‼
📖 Read
via "National Vulnerability Database".
resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection. It does not properly check the parameters sent as input before they are processed on the server. Due to the lack of validation of user input, an unauthenticated attacker can bypass the syntax intended by the software (e.g., concatenate `&|;\r\ commands) and inject arbitrary system commands with the privileges of the application user.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29750 ‼
📖 Read
via "National Vulnerability Database".
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29748 ‼
📖 Read
via "National Vulnerability Database".
Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manage_client&id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29993 ‼
📖 Read
via "National Vulnerability Database".
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30279 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8. The event logging of the ASQ sofbus lacbus plugin triggers the dereferencing of a NULL pointer, leading to a crash of SNS. An attacker could exploit this vulnerability via forged sofbus lacbus traffic to cause a firmware crash.📖 Read
via "National Vulnerability Database".
🕴 Needs Improvement: Scoring Biden's Cyber Executive Order 🕴
📖 Read
via "Dark Reading".
One year after it was issued, has President Biden's Cyber Executive Order had an impact?📖 Read
via "Dark Reading".
Darkreading
Needs Improvement: Scoring Biden's Cyber Executive Order
One year after it was issued, has President Biden's Cyber Executive Order had an impact?
‼ CVE-2021-33082 ‼
📖 Read
via "National Vulnerability Database".
Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33074 ‼
📖 Read
via "National Vulnerability Database".
Protection mechanism failure in firmware for some Intel(R) SSD, Intel(R) SSD DC and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-21136 ‼
📖 Read
via "National Vulnerability Database".
Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial of service via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-21182 ‼
📖 Read
via "National Vulnerability Database".
A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33075 ‼
📖 Read
via "National Vulnerability Database".
Race condition in firmware for some Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow a privileged user to potentially enable denial of service via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0155 ‼
📖 Read
via "National Vulnerability Database".
Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0190 ‼
📖 Read
via "National Vulnerability Database".
Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33077 ‼
📖 Read
via "National Vulnerability Database".
Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0153 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33080 ‼
📖 Read
via "National Vulnerability Database".
Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0004 ‼
📖 Read
via "National Vulnerability Database".
Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1699 ‼
📖 Read
via "National Vulnerability Database".
Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33108 ‼
📖 Read
via "National Vulnerability Database".
Improper input validation in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29998 ‼
📖 Read
via "National Vulnerability Database".
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/clientStatus.php?client_id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22413 ‼
📖 Read
via "National Vulnerability Database".
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 223022.📖 Read
via "National Vulnerability Database".