Show filters
330 Total Results
Displaying 101-110 of 330
Sort by:
Attacker Value
Unknown
CVE-2022-41244
Disclosure Date: September 21, 2022 (last updated February 24, 2025)
Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections.
0
Attacker Value
Unknown
CVE-2022-37253
Disclosure Date: September 06, 2022 (last updated February 24, 2025)
Persistent cross-site scripting (XSS) in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulation of an unsanitized POST parameter
0
Attacker Value
Unknown
CVE-2022-34611
Disclosure Date: July 27, 2022 (last updated February 24, 2025)
A cross-site scripting (XSS) vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac #" text field.
0
Attacker Value
Unknown
CVE-2022-31879
Disclosure Date: July 26, 2022 (last updated February 24, 2025)
Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter.
0
Attacker Value
Unknown
CVE-2022-26117
Disclosure Date: July 18, 2022 (last updated February 24, 2025)
An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI.
0
Attacker Value
Unknown
CVE-2022-31906
Disclosure Date: June 16, 2022 (last updated February 23, 2025)
Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ofrs/classes/Master.php.
0
Attacker Value
Unknown
CVE-2022-31415
Disclosure Date: June 14, 2022 (last updated February 23, 2025)
Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php.
0
Attacker Value
Unknown
CVE-2022-29597
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to Local File Inclusion (LFI). Any authenticated user has the ability to reference internal system files within requests made to the RRSWeb/maint/ShowDocument/ShowDocument.aspx page. The server will successfully respond with the file contents of the internal system file requested. This ability could allow for adversaries to extract sensitive data and/or files from the underlying file system, gain knowledge about the internal workings of the system, or access source code of the application.
0
Attacker Value
Unknown
CVE-2022-31984
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/take_action.php?id=.
0
Attacker Value
Unknown
CVE-2022-31983
Disclosure Date: June 02, 2022 (last updated February 23, 2025)
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/manage_request&id=.
0
