CVE Vulnerabilities Archive - Page 16246 of 18763

CVE-2022-34557

February 23, 2023 by godfreyd94

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/permit/permit.php.

CVE-2022-34556

February 23, 2023 by godfreyd94

PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c.

CVE-2022-34555

February 23, 2023 by godfreyd94

TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is exploited via a crafted packet.

CVE-2022-34551

February 23, 2023 by godfreyd94

Sims v1.0 was discovered to allow path traversal when downloading attachments.

Sims v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /addNotifyServlet. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notifyInfo parameter.

CVE-2022-34549

February 23, 2023 by godfreyd94

Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet. This vulnerability allows attackers to escalate privileges and execute arbitrary commands via a crafted file.