Vulnerabilidades

A vulnerability, which was classified as problematic, has been found in SourceCodester Students Online Internship Timesheet Syste 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_company. The manipulation of the argument name with the input…

A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file rendered_report.php of the component GET Parameter Handler. The manipulation of the argument sid leads to sql injection. It is possible to launch…

Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup Environment in an…

A flaw was found in Keycloak. This flaw depends on a non-default configuration "Revalidate Client Certificate" to be enabled and the reverse proxy is not validating the certificate before Keycloak. Using this method an attacker may choose the certificate which will be validated by the server. If this happens and the…

IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network.

IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unauthenticated port access.

anuko timetracker is an open source time tracking system. Boolean-based blind SQL injection vulnerability existed in Time Tracker invoices.php in versions prior to 1.22.11.5781. This was happening because of a coding error after validating parameters in POST requests. There was no check for errors before adjusting…

Un atacante remoto autenticado puede usar una vulnerabilidad de restricción inadecuada de operaciones dentro de los límites de un búfer de memoria en múltiples versiones de múltiples productos CODESYS para forzar una situación de denegación de servicio.

Un atacante remoto autenticado puede usar una vulnerabilidad de validación de entrada incorrecta en los componentes CmpApp/CmpAppBP/CmpAppForce de múltiples productos CODESYS en múltiples versiones para leer desde una dirección no válida, lo que puede conducir a una condición de denegación de servicio.

En varios productos CODESYS en múltiples versiones, un atacante remoto no autorizado puede usar una vulnerabilidad de validación de entrada incorrecta para leer direcciones no válidas, lo que provoca una denegación de servicio.

Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en la pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o…

Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en la pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o…

Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en la pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o…

Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o…

Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en la pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o…

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may craft specific requests that use the vulnerability leading to a denial-of-service condition.

Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.

Time Tracker is an open source time tracking system. A time-based blind injection vulnerability existed in Time Tracker reports in versions prior to 1.22.13.5792. This was happening because the `reports.php` page was not validating all parameters in POST requests. Because some parameters were not checked, it was…