| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-22929 | Cri | 0.64 | 9.8 | 0.03 | Jan 21, 2022 | MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file. | ||
| CVE-2022-22928 | Cri | 0.64 | 9.8 | 0.03 | Jan 21, 2022 | MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code. | ||
| CVE-2022-22895 | Hig | 0.51 | 7.8 | 0.01 | Jan 21, 2022 | Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conversion.c. | ||
| CVE-2022-22894 | Hig | 0.51 | 7.8 | 0.01 | Jan 21, 2022 | Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcache.c. | ||
| CVE-2022-22893 | Hig | 0.51 | 7.8 | 0.01 | Jan 21, 2022 | Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c. | ||
| CVE-2022-22892 | Med | 0.36 | 5.5 | 0.01 | Jan 21, 2022 | There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) || ecma_is_value_number (value) || ecma_is_value_string (value) || ecma_is_value_bigint (value) || ecma_is_value_symbol (value) || ecma_is_value_object (value)'… | ||
| CVE-2022-22891 | Med | 0.36 | 5.5 | 0.01 | Jan 21, 2022 | Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecma_ref_object_inline in /jerry-core/ecma/base/ecma-gc.c. | ||
| CVE-2022-22890 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_REG' failed at /jerry-core/parser/js/js-scanner-util.c in Jerryscript 3.0.0. | ||
| CVE-2022-22888 | Hig | 0.51 | 7.8 | 0.01 | Jan 20, 2022 | Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objects.c. | ||
| CVE-2021-46351 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_prototype_dispatch_set):421 in JerryScript 3.0.0. | ||
| CVE-2021-46350 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in JerryScript 3.0.0. | ||
| CVE-2021-46349 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'type == ECMA_OBJECT_TYPE_GENERAL || type == ECMA_OBJECT_TYPE_PROXY' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0. | ||
| CVE-2021-46348 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at /jerry-core/ecma/base/ecma-literal-storage.c in JerryScript 3.0.0. | ||
| CVE-2021-46347 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0. | ||
| CVE-2021-46346 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_prototype_dispatch_set):421 in JerryScript 3.0.0. | ||
| CVE-2021-46345 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0. | ||
| CVE-2021-46344 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0. | ||
| CVE-2021-46343 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'context_p->token.type == LEXER_LITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0. | ||
| CVE-2021-46342 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array (obj_p)' failed at /jerry-core/ecma/base/ecma-helpers.c in JerryScript 3.0.0. | ||
| CVE-2021-46340 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'context_p->stack_top_uint8 == SCAN_STACK_TRY_STATEMENT || context_p->stack_top_uint8 == SCAN_STACK_CATCH_STATEMENT' failed at /parser/js/js-scanner.c(scanner_scan_statement_end) in JerryScript 3.0.0. | ||
| CVE-2021-46339 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'lit_is_valid_cesu8_string (string_p, string_size)' failed at /base/ecma-helpers-string.c(ecma_new_ecma_string_from_utf8) in JerryScript 3.0.0. | ||
| CVE-2021-46338 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'ecma_is_lexical_environment (object_p)' failed at /base/ecma-helpers.c(ecma_get_lex_env_type) in JerryScript 3.0.0. | ||
| CVE-2021-46337 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'page_p != NULL' failed at /parser/js/js-parser-mem.c(parser_list_get) in JerryScript 3.0.0. | ||
| CVE-2021-46336 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser-expr.c(parser_parse_class_body) in JerryScript 3.0.0. | ||
| CVE-2021-46335 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasInstance. | ||
| CVE-2021-46334 | Hig | 0.51 | 7.8 | 0.01 | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat. | ||
| CVE-2021-46333 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove. | ||
| CVE-2021-46332 | Hig | 0.51 | 7.8 | 0.01 | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter. | ||
| CVE-2021-46331 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype. | ||
| CVE-2021-46330 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuffer_prototype_concat. | ||
| CVE-2021-46329 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini. | ||
| CVE-2021-46328 | Hig | 0.51 | 7.8 | 0.01 | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main. | ||
| CVE-2021-46327 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort. | ||
| CVE-2021-46326 | Hig | 0.51 | 7.8 | 0.01 | Jan 20, 2022 | Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy. | ||
| CVE-2021-46325 | Hig | 0.51 | 7.8 | 0.01 | Jan 20, 2022 | Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf. | ||
| CVE-2021-46324 | Hig | 0.51 | 7.8 | 0.01 | Jan 20, 2022 | Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString. | ||
| CVE-2021-46323 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass. | ||
| CVE-2021-46322 | Med | 0.36 | 5.5 | 0.01 | Jan 20, 2022 | Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component duk_push_tval in duktape/duk_api_stack.c. | ||
| CVE-2020-23315 | Hig | 0.49 | 7.5 | 0.02 | Jan 20, 2022 | There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta. | ||
| CVE-2021-46061 | Cri | 0.64 | 9.8 | 0.02 | Jan 20, 2022 | An SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop Management system (RSMS) 1.0 via the code parameter in /rsms/ node app. | ||
| CVE-2021-29785 | Med | 0.38 | 5.9 | 0.01 | Jan 20, 2022 | IBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.… | ||
| CVE-2022-23120 | Hig | 0.51 | 7.8 | 0.06 | Jan 20, 2022 | A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to… | ||
| CVE-2022-23119 | Hig | 0.50 | 7.5 | 0.21 | Jan 20, 2022 | A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file system. Please note: an attacker must first obtain compromised access to the… | ||
| CVE-2021-44245 | Cri | 0.64 | 9.8 | 0.01 | Jan 20, 2022 | An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System (CTMS) 1.0 via the (1) username and (2) contactno parameters. | ||
| CVE-2021-44244 | Cri | 0.64 | 9.8 | 0.01 | Jan 20, 2022 | An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php. | ||
| CVE-2021-44092 | Cri | 0.64 | 9.8 | 0.01 | Jan 20, 2022 | An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form. | ||
| CVE-2021-44090 | Cri | 0.64 | 9.8 | 0.01 | Jan 20, 2022 | An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter. | ||
| CVE-2022-21658 | Hig | 0.48 | 7.3 | 0.01 | Jan 20, 2022 | Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condition enabling… | ||
| CVE-2021-45417 | Hig | 0.51 | 7.8 | 0.00 | Jan 20, 2022 | AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow. | ||
| CVE-2021-44091 | Med | 0.35 | 5.4 | 0.01 | Jan 20, 2022 | A Cross-Site Scripting (XSS) vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the (1) fullname, (2) phone, and (3) address parameters. |
- risk 0.64cvss 9.8epss 0.03
MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file.
- risk 0.64cvss 9.8epss 0.03
MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code.
- risk 0.51cvss 7.8epss 0.01
Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conversion.c.
- risk 0.51cvss 7.8epss 0.01
Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcache.c.
- risk 0.51cvss 7.8epss 0.01
Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) || ecma_is_value_number (value) || ecma_is_value_string (value) || ecma_is_value_bigint (value) || ecma_is_value_symbol (value) || ecma_is_value_object (value)'…
- risk 0.36cvss 5.5epss 0.01
Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecma_ref_object_inline in /jerry-core/ecma/base/ecma-gc.c.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_REG' failed at /jerry-core/parser/js/js-scanner-util.c in Jerryscript 3.0.0.
- risk 0.51cvss 7.8epss 0.01
Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objects.c.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_prototype_dispatch_set):421 in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'type == ECMA_OBJECT_TYPE_GENERAL || type == ECMA_OBJECT_TYPE_PROXY' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at /jerry-core/ecma/base/ecma-literal-storage.c in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_prototype_dispatch_set):421 in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'context_p->token.type == LEXER_LITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array (obj_p)' failed at /jerry-core/ecma/base/ecma-helpers.c in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'context_p->stack_top_uint8 == SCAN_STACK_TRY_STATEMENT || context_p->stack_top_uint8 == SCAN_STACK_CATCH_STATEMENT' failed at /parser/js/js-scanner.c(scanner_scan_statement_end) in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'lit_is_valid_cesu8_string (string_p, string_size)' failed at /base/ecma-helpers-string.c(ecma_new_ecma_string_from_utf8) in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'ecma_is_lexical_environment (object_p)' failed at /base/ecma-helpers.c(ecma_get_lex_env_type) in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'page_p != NULL' failed at /parser/js/js-parser-mem.c(parser_list_get) in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser-expr.c(parser_parse_class_body) in JerryScript 3.0.0.
- risk 0.36cvss 5.5epss 0.01
Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasInstance.
- risk 0.51cvss 7.8epss 0.01
Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.
- risk 0.36cvss 5.5epss 0.01
Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove.
- risk 0.51cvss 7.8epss 0.01
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.
- risk 0.36cvss 5.5epss 0.01
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype.
- risk 0.36cvss 5.5epss 0.01
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuffer_prototype_concat.
- risk 0.36cvss 5.5epss 0.01
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.
- risk 0.51cvss 7.8epss 0.01
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.
- risk 0.36cvss 5.5epss 0.01
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort.
- risk 0.51cvss 7.8epss 0.01
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.
- risk 0.51cvss 7.8epss 0.01
Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf.
- risk 0.51cvss 7.8epss 0.01
Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.
- risk 0.36cvss 5.5epss 0.01
Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass.
- risk 0.36cvss 5.5epss 0.01
Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component duk_push_tval in duktape/duk_api_stack.c.
- risk 0.49cvss 7.5epss 0.02
There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta.
- risk 0.64cvss 9.8epss 0.02
An SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop Management system (RSMS) 1.0 via the code parameter in /rsms/ node app.
- risk 0.38cvss 5.9epss 0.01
IBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.…
- risk 0.51cvss 7.8epss 0.06
A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to…
- risk 0.50cvss 7.5epss 0.21
A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file system. Please note: an attacker must first obtain compromised access to the…
- risk 0.64cvss 9.8epss 0.01
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System (CTMS) 1.0 via the (1) username and (2) contactno parameters.
- risk 0.64cvss 9.8epss 0.01
An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php.
- risk 0.64cvss 9.8epss 0.01
An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form.
- risk 0.64cvss 9.8epss 0.01
An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter.
- risk 0.48cvss 7.3epss 0.01
Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condition enabling…
- risk 0.51cvss 7.8epss 0.00
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.
- risk 0.35cvss 5.4epss 0.01
A Cross-Site Scripting (XSS) vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the (1) fullname, (2) phone, and (3) address parameters.