A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1. Affected is an unknown function of the file add-category.php. The manipulation of the argument category leads to sql injection. The exploit has been disclosed to the public and may...
AFFECTED_PRODUCTS:
Phpgurukul Dairy Farm Shop Management System
A vulnerability, which was classified as critical, has been found in unknown-o download-station up to 1.1.8. This issue affects some unknown processing of the file index.php. The manipulation of the argument f leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit h...
AFFECTED_PRODUCTS:
Unknown-O Download Station
An issue discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 leads to an infinite loop and allows attackers to cause a denial of service.
AFFECTED_PRODUCTS:
Freeimage Project Freeimage
A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to unres...
AFFECTED_PRODUCTS:
Likeshop Likeshop
A vulnerability classified as problematic has been found in SourceCodester Engineers Online Portal 1.0. This affects an unknown part. The manipulation leads to session fixiation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to...
AFFECTED_PRODUCTS:
Engineers Online Portal Project Engineers Online Portal
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploita...
AFFECTED_PRODUCTS:
Engineers Online Portal Project Engineers Online Portal
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to sensitive cookie without secure attribute. The attack can be launched remotely. The complexity of an att...
AFFECTED_PRODUCTS:
Engineers Online Portal Project Engineers Online Portal
An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of service.
AFFECTED_PRODUCTS:
Freeimage Project Freeimage
Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service.
AFFECTED_PRODUCTS:
Freeimage Project Freeimage
An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of service and/or run arbitrary code.
AFFECTED_PRODUCTS:
Freeimage Project Freeimage
A Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-of-service.
AFFECTED_PRODUCTS:
Freeimage Project Freeimage
An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service attacks and/or run arbitrary code.
AFFECTED_PRODUCTS:
Freeimage Project Freeimage
AMI’s SPx contains
a vulnerability in the BMC where an Attacker may
cause a stack-based buffer overflow via an adjacent network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability....
AFFECTED_PRODUCTS:
Ami Megarac Sp X,
Ami Megarac Sp X
AMI’s
SPx contains a vulnerability in the BMC where an Attacker may
cause a heap memory corruption via an adjacent network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.
AFFECTED_PRODUCTS:
Ami Megarac Sp X,
Ami Megarac Sp X
AMI’s
SPx contains a vulnerability in the BMC where an Attacker may
cause a stack memory corruption via an adjacent network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.
AFFECTED_PRODUCTS:
Ami Megarac Sp X,
Ami Megarac Sp X
AMI’s
SPx contains a vulnerability in the BMC where an Attacker may
cause a heap memory corruption via an adjacent network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.
AFFECTED_PRODUCTS:
Ami Megarac Sp X,
Ami Megarac Sp X
AMI’s
SPx contains a vulnerability in the BMC where an Attacker may
cause a heap memory corruption via an adjacent network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.
AFFECTED_PRODUCTS:
Ami Megarac Sp X,
Ami Megarac Sp X
AMI’s SPx contains
a vulnerability in the BMC where an Attacker may cause a
stack-based buffer overflow via an adjacent network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.
AFFECTED_PRODUCTS:
Ami Megarac Sp X,
Ami Megarac Sp X
AMI’s SPx contains
a vulnerability in the BMC where an Attacker may cause an
untrusted pointer to dereference via a local network. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability....
AFFECTED_PRODUCTS:
Ami Megarac Sp X,
Ami Megarac Sp X
AMI’s SPx contains
a vulnerability in the BMC where an Attacker
may cause an untrusted pointer to dereference by a local network. A successful
exploitation of this vulnerability may lead to a loss of confidentiality,
integrity, and/or availability....
AFFECTED_PRODUCTS:
Ami Megarac Sp X,
Ami Megarac Sp X
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the component File Upload Handler. The manipulation leads to resource consumption. It is possible to launch the attack remotely. The exploit has been dis...
AFFECTED_PRODUCTS:
Engineers Online Portal Project Engineers Online Portal
A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file signup_teacher.php. The manipulation of the argument Password leads to weak password requirements. The attack may be initiated remotely. The c...
AFFECTED_PRODUCTS:
Engineers Online Portal Project Engineers Online Portal
A vulnerability has been found in CodeAstro Vehicle Booking System 1.0 and classified as problematic. This vulnerability affects unknown code of the file usr/user-give-feedback.php of the component Feedback Page. The manipulation of the argument My Testemonial leads to cross site scripting. The atta...
AFFECTED_PRODUCTS:
Vehicle Booking System Project Vehicle Booking System
A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node.
AFFECTED_PRODUCTS:
Red Hat Openshift Container Platform,
Red Hat Openshift Container Platform,
Red Hat Openshift Container Platform
Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the email...
AFFECTED_PRODUCTS:
Proofpoint Enterprise Protection,
Proofpoint Enterprise Protection,
Proofpoint Enterprise Protection
Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the name field when creating a new custom table.
AFFECTED_PRODUCTS:
Jfinalcms Project Jfinalcms
Cross Site Scripting vulnerability in Follet School Solutions Destiny v.20_0_1_AU4 and later allows a remote attacker to run arbitrary code via presentonesearchresultsform.do.
AFFECTED_PRODUCTS:
Follettlearning Solutions Destiny
A vulnerability, which was classified as problematic, was found in CodeAstro Vehicle Booking System 1.0. This affects an unknown part of the file usr/usr-register.php of the component User Registration. The manipulation of the argument Full_Name/Last_Name/Address with the input <script>alert(documen...
AFFECTED_PRODUCTS:
Vehicle Booking System Project Vehicle Booking System
A vulnerability, which was classified as critical, has been found in soxft TimeMail up to 1.1. Affected by this issue is some unknown functionality of the file check.php. The manipulation of the argument c leads to sql injection. The exploit has been disclosed to the public and may be used. The iden...
AFFECTED_PRODUCTS:
Soxft Timemail
jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. Calling `jws.Parse` with a JSON serialized payload where the `signature` field is present while `protected` is absent can lead to a nil pointer dereference. The vulnerability can be used to crash...
AFFECTED_PRODUCTS:
Lestrrat-Go Jwx
A vulnerability classified as problematic was found in CodeAstro Simple House Rental System 5.6. Affected by this vulnerability is an unknown functionality of the component Login Panel. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclose...
AFFECTED_PRODUCTS:
Simple House Rental System Project Simple House Rental System
A vulnerability classified as critical has been found in Inis up to 2.0.1. Affected is an unknown function of the file /app/api/controller/default/Sqlite.php. The manipulation of the argument sql leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250110 is the...
AFFECTED_PRODUCTS:
Inis Project Inis
A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker
logged in with a user level account to gain higher privileges by providing a harmful serialized
object.
AFFECTED_PRODUCTS:
Schneider Electric Easergy Studio
react-native-mmkv is a library that allows easy use of MMKV inside React Native applications. Before version 2.11.0, the react-native-mmkv logged the optional encryption key for the MMKV database into the Android system log. The key can be obtained by anyone with access to the Android Debugging Brid...
AFFECTED_PRODUCTS:
Mrousavy React Native Mmkv
Microsoft Identity Denial of service vulnerability
AFFECTED_PRODUCTS:
Microsoft .net,
Microsoft .net,
Microsoft .net
... (+7)
A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to path traversal: '../filedir'. The exploit...
AFFECTED_PRODUCTS:
Inis Project Inis
Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Printer Metadata Troubleshooter Tool
Windows Themes Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2012,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+9)
Microsoft SharePoint Server Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft SharePoint Server,
Microsoft SharePoint Server
Windows Server Key Distribution Service Security Feature Bypass
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 10 1607,
Microsoft Windows 11 21h2
... (+7)
Microsoft Message Queuing Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+11)
Windows TCP/IP Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+11)
.NET Framework Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft .net Framework,
Microsoft .net Framework,
Microsoft .net Framework
... (+4)
Windows Cryptographic Services Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+11)
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows 10 1809
... (+5)
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022,
Microsoft Windows 11 22h2
... (+2)
Remote Desktop Client Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+10)
Microsoft Bluetooth Driver Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022,
Microsoft Windows 10 21h2
... (+4)
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+6)
Windows Hyper-V Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+6)