CVE-2022-3810

Axiomatic Bento4 mp42hevc Mp42Hevc.cpp AP4_File denial of service

A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4_File::AP4_File of the file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212667.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3813

Axiomatic Bento4 mp4edit memory leak

A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212679.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3814

Axiomatic Bento4 mp4decrypt memory leak

A vulnerability classified as problematic was found in Axiomatic Bento4. This vulnerability affects unknown code of the component mp4decrypt. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212680.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3815

Axiomatic Bento4 mp4decrypt memory leak

A vulnerability, which was classified as problematic, has been found in Axiomatic Bento4. This issue affects some unknown processing of the component mp4decrypt. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212681 was assigned to this vulnerability.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3816

Axiomatic Bento4 mp4decrypt memory leak

A vulnerability, which was classified as problematic, was found in Axiomatic Bento4. Affected is an unknown function of the component mp4decrypt. The manipulation leads to memory leak. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-212682 is the identifier assigned to this vulnerability.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3817

Axiomatic Bento4 mp4mux memory leak

A vulnerability has been found in Axiomatic Bento4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component mp4mux. The manipulation leads to memory leak. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212683.

CVSS 3.1 · 4.3 Medium EPSS 1.1% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2020-36608

Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file admin_organizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is dfd0afacb26c3682a847bea7b49ea440b63f3baa. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-212816.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Tribalsystems

Products

Zenario

CVE-2022-3825

Huaxia ERP User Management sql injection

A vulnerability was found in Huaxia ERP 2.3 and classified as critical. Affected by this issue is some unknown functionality of the component User Management. The manipulation of the argument login leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212792.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Huaxiaerp

Products

Huaxia Erp

CVE-2022-3826

Huaxia ERP Retail Management list information disclosure

A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212793 was assigned to this vulnerability.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Huaxiaerp

Products

Huaxia Erp

CVE-2022-3827

centreon Contact Groups Form formContactGroup.php sql injection

A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cg_id leads to sql injection. The attack can be initiated remotely. The name of the patch is 293b10628f7d9f83c6c82c78cf637cbe9b907369. It is recommended to apply a patch to fix this issue. VDB-212794 is the identifier assigned to this vulnerability.

CVSS 3.1 · 6.3 Medium EPSS 1.0% KEV · Not listed

Vendors

Centreon

Products

Centreon

CVE-2022-3845

phpipam Import Preview import-load-data.php cross site scripting

A vulnerability has been found in phpipam and classified as problematic. Affected by this vulnerability is an unknown functionality of the file app/admin/import-export/import-load-data.php of the component Import Preview Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.5.0 is able to address this issue. The name of the patch is 22c797c3583001211fe7d31bccd3f1d4aeeb3bbc. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-212863.

CVSS 3.1 · 2.4 Low EPSS < 1% KEV · Not listed

Vendors

Phpipam

Products

Phpipam

CVE-2022-3868

SourceCodester Sanitization Management System sql injection

A vulnerability classified as critical has been found in SourceCodester Sanitization Management System. Affected is an unknown function of the file /php-sms/classes/Master.php?f=save_quote. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-213012.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Sanitization Management System Project

Products

Sanitization Management System

CVE-2022-3939

lanyulei ferry API file.go path traversal

A vulnerability, which was classified as critical, has been found in lanyulei ferry. Affected by this issue is some unknown functionality of the file apis/public/file.go of the component API. The manipulation of the argument file leads to path traversal. The attack may be launched remotely. VDB-213446 is the identifier assigned to this vulnerability.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Ferry Project

Products

Ferry

CVE-2022-3940

lanyulei ferry task.go path traversal

A vulnerability, which was classified as problematic, was found in lanyulei ferry. This affects an unknown part of the file apis/process/task.go. The manipulation of the argument file_name leads to path traversal. The associated identifier of this vulnerability is VDB-213447.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Ferry Project

Products

Ferry

CVE-2022-3942

SourceCodester Sanitization Management System cross site scripting

A vulnerability was found in SourceCodester Sanitization Management System and classified as problematic. This issue affects some unknown processing of the file php-sms/?p=request_quote. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-213449 was assigned to this vulnerability.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sanitization Management System Project

Products

Sanitization Management System

CVE-2022-3943

ForU CMS cms_chip.php cross site scripting

A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the file cms_chip.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-213450 is the identifier assigned to this vulnerability.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Foru Cms Project

Products

Foru Cms

CVE-2022-3944

jerryhanjj ERP Commodity Management inventory.php uploadImages unrestricted upload

A vulnerability was found in jerryhanjj ERP. It has been declared as critical. Affected by this vulnerability is the function uploadImages of the file application/controllers/basedata/inventory.php of the component Commodity Management. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213451.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Erp Project

Products

Erp

CVE-2022-3947

eolinker goku_lite list sql injection

A vulnerability classified as critical has been found in eolinker goku_lite. This affects an unknown part of the file /balance/service/list. The manipulation of the argument route/keyword leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213453 was assigned to this vulnerability.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Eolink

Products

Goku Lite

CVE-2022-3948

eolinker goku_lite getList sql injection

A vulnerability classified as critical was found in eolinker goku_lite. This vulnerability affects unknown code of the file /plugin/getList. The manipulation of the argument route/keyword leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-213454 is the identifier assigned to this vulnerability.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Eolink

Products

Goku Lite

CVE-2022-3949

Sourcecodester Simple Cashiering System User Account cross site scripting

A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This issue affects some unknown processing of the component User Account Handler. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-213455.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Simple Cashiering System Project

Products

Simple Cashiering System