CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at post.php. This vulnerability allows attackers to access database information.
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at category.php. This vulnerability allows attackers to access database information.
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows attackers to access database information.
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_members.php.
An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks.
Routeros, Ccr1009-7g-1c-1s+, Ccr1009-7g-1c-1s+pc, Ccr1009-7g-1c-pc, Ccr1016-12g, Ccr1016-12s-1s+, Ccr1036-12g-4s, Ccr1036-12g-4s-em, Ccr1036-8g-2s+, Ccr1036-8g-2s+em
2023-02-03
N/A
9.8 CRITICAL
Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows attackers to execute arbitrary code via a crafted packet.
Routeros, Ccr1009-7g-1c-1s+, Ccr1009-7g-1c-1s+pc, Ccr1009-7g-1c-pc, Ccr1016-12g, Ccr1016-12s-1s+, Ccr1036-12g-4s, Ccr1036-12g-4s-em, Ccr1036-8g-2s+, Ccr1036-8g-2s+em
2023-02-03
N/A
8.8 HIGH
Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulnerability allows attackers to execute arbitrary code via a crafted nova message.
Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the subfolder C:toolsphp81 and all files located in that folder.
Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticated Users group write privileges for the subfolder C:agent and all files located in that folder.
Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for the subfolder C:Python311 and all files located in that folder.