CVE Vulnerability Catalog

A security flaw has been discovered in Mini-Inventory-and-Sales-Management-System 0.1. The function Transaction::getAll in application/models/Transaction.php is affected. Manipulation of the orderBy/orderFormat arguments results in SQL injection, and the attack can be initiated remotely. The exploit has been publicly released.

A security vulnerability has been detected in DeDeCMS 53_1_UTF8. This vulnerability affects unknown code of the file /plus/advancedsearch.php. Such manipulation of the argument sql leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

In Punk::OAuth2 versions before 0.03 for Perl, an attacker-chosen off-site redirect after login is possible because same_origin_path accepts a backslash or tab in the return parameter. This allows bypassing the origin check and redirecting to an external domain.

An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote attacker on an adjacent network can send a specially crafted HTTP request to trigger a crash of the HTTP service process.

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.

A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.php. The manipulation of the argument userid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.

A flaw has been found in mruby 3.1.0. The function udiv in bigint.c is affected. Executing a manipulation can lead to floating point comparison with incorrect operator. The attack can be launched remotely, and the exploit has been published.

The Pcapng file parser in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to a denial-of-service condition.

A crash in the X.509IF protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.

The H.245 protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to a denial-of-service condition.

BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.

The Kerberos protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to a denial-of-service condition.

The Bluetooth HFP Profile protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to a denial-of-service condition.

The Bluetooth BR/EDR FHS protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to a denial-of-service condition.

The CMS protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to a denial-of-service condition.

The 3gpp phone log file parser in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to denial of service.

The ESS protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to denial of service.

The SSH protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to denial of service.

The Bluetooth AVRCP Profile protocol dissector in versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 can crash, leading to denial of service.

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service.