Security Vulnerabilities - CVEs Published In 2022
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/bookdetails.php.
CVSS Score
9.8
EPSS Score
0.009
Published
2022-08-30
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/studentdetails.php.
CVSS Score
9.8
EPSS Score
0.009
Published
2022-08-30
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /librarian/lab.php.
CVSS Score
9.8
EPSS Score
0.009
Published
2022-08-30
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /staff/lab.php.
CVSS Score
9.8
EPSS Score
0.009
Published
2022-08-30
Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi.
CVSS Score
9.8
EPSS Score
0.97
Published
2022-08-29
A command injection vulnerability in the CLI (Command Line Interface) implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges.
CVSS Score
9.8
EPSS Score
0.024
Published
2022-08-29
Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked via a brute-force attack.
CVSS Score
9.8
EPSS Score
0.007
Published
2022-08-29
Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08execute_ping_01.
CVSS Score
9.8
EPSS Score
0.016
Published
2022-08-29
Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file.
CVSS Score
9.8
EPSS Score
0.011
Published
2022-08-29
Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account. Attackers are able to access the passcord via the file /etc/ciel.cfg.
CVSS Score
9.8
EPSS Score
0.008
Published
2022-08-29