‼ CVE-2022-23237 ‼
📖 Read
via "National Vulnerability Database".
E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32201 ‼
📖 Read
via "National Vulnerability Database".
In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27781 ‼
📖 Read
via "National Vulnerability Database".
libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31953 ‼
📖 Read
via "National Vulnerability Database".
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/view_report.php?id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32003 ‼
📖 Read
via "National Vulnerability Database".
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/view_court.php?id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30831 ‼
📖 Read
via "National Vulnerability Database".
Wedding Management System v1.0 is vulnerable to SQL Injection via Wedding-Management/wedding_details.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31343 ‼
📖 Read
via "National Vulnerability Database".
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/view_details&id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42199 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. It allows an attacker to cause code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31966 ‼
📖 Read
via "National Vulnerability Database".
ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simple_chat_bot/classes/Master.php?f=delete_img.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30999 ‼
📖 Read
via "National Vulnerability Database".
FriendsofFlarum (FoF) Upload is an extension that handles file uploads intelligently for your forum. If FoF Upload prior to version 1.2.3 is configured to allow the uploading of SVG files ('image/svg+xml'), navigating directly to an SVG file URI could execute arbitrary Javascript code decided by an attacker. This Javascript code could include the execution of HTTP web requests to Flarum, or any other web service. This could allow data to be leaked by an authenticated Flarum user, or, possibly, for data to be modified maliciously. This issue has been patched with v1.2.3, which now sanitizes uploaded SVG files. As a workaround, remove the ability for users to upload SVG files through FoF Upload.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32001 ‼
📖 Read
via "National Vulnerability Database".
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/view_product.php?id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28690 ‼
📖 Read
via "National Vulnerability Database".
The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30815 ‼
📖 Read
via "National Vulnerability Database".
elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30349 ‼
📖 Read
via "National Vulnerability Database".
siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44097 ‼
📖 Read
via "National Vulnerability Database".
EGavilan Media Contact-Form-With-Messages-Entry-Management 1.0 is vulnerable to SQL Injection via Addmessage.php. This allows a remote attacker to compromise Application SQL database.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26975 ‼
📖 Read
via "National Vulnerability Database".
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30514 ‼
📖 Read
via "National Vulnerability Database".
School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:126.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27782 ‼
📖 Read
via "National Vulnerability Database".
libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31354 ‼
📖 Read
via "National Vulnerability Database".
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=get_vehicle_service.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31346 ‼
📖 Read
via "National Vulnerability Database".
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_service.📖 Read
via "National Vulnerability Database".
🕴 Building America's Cybersecurity Infrastructure 🕴
📖 Read
via "Dark Reading".
The government is putting the right skills and expertise in place to fight the rising cyber threat.📖 Read
via "Dark Reading".
Dark Reading
Building America's Cybersecurity Infrastructure
The government is putting the right skills and expertise in place to fight the rising cyber threat.