CVE Vulnerabilities Archive - Page 16399 of 18763

CVE-2022-32995

February 23, 2023 by godfreyd94

Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the template remote download function.

CVE-2022-32994

February 23, 2023 by godfreyd94

Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload.

CVE-2022-32993

February 23, 2023 by godfreyd94

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.

CVE-2022-32992

February 23, 2023 by godfreyd94

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php.

CVE-2022-32991

February 23, 2023 by godfreyd94

Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the eid parameter at welcome.php.

CVE-2022-32990

February 23, 2023 by godfreyd94

An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).