Vulnerabilities
Vulnerable Software
Security Vulnerabilities - CVEs Published In 2022
The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.
CVSS Score
7.8
EPSS Score
0.005
Published
2022-10-20
In PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration files leads to admin panel access.
CVSS Score
7.8
EPSS Score
0.003
Published
2022-10-20
OpenCRX before v5.2.2 was discovered to be vulnerable to password enumeration due to the difference in error messages received during a password reset which could enable an attacker to determine if a username, email or ID is valid.
CVSS Score
5.3
EPSS Score
0.008
Published
2022-10-20
Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=.
CVSS Score
9.8
EPSS Score
0.01
Published
2022-10-20
In Simple Exam Reviewer Management System v1.0 the User List function has improper access control that allows low privileged users to modify user permissions to higher privileges.
CVSS Score
6.5
EPSS Score
0.007
Published
2022-10-20
In Simple Exam Reviewer Management System v1.0 the User List function suffers from insecure file upload.
CVSS Score
8.8
EPSS Score
0.012
Published
2022-10-20
Simple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Exam List.
CVSS Score
8.8
EPSS Score
0.006
Published
2022-10-20
Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting (XSS) via the Exam List.
CVSS Score
5.4
EPSS Score
0.006
Published
2022-10-20
Simple Exam Reviewer Management System v1.0 is vulnerable to Insecure file upload.
CVSS Score
7.2
EPSS Score
0.012
Published
2022-10-20
An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code via a crafted UNL file.
CVSS Score
7.2
EPSS Score
0.014
Published
2022-10-20


Contact Us

Shodan ® - All rights reserved