Podatności

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be…

CVSS 5,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVSS 5,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

CVSS 5,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVSS 5,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.

CVSS 5,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSession.java of the component Payment Request Handler. Executing a manipulation of the argument pki_type can lead to server-side request forgery. It is possible to launch the…

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has…

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might…

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of the file admin/add_admin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The…

CVSS 5,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVSS 5,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.

CVSS 5,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

CVSS 5,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

CVSS 5,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVSS 5,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

CVSS 5,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVSS 5,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki