Lucene search
+L

186 matches found

CVE
CVE
added 2024/03/12 3:24 p.m.63 views

CVE-2024-1301

CVE-2024-1301 describes an SQL injection in Badger Meter Monitool affecting versions 4.6.3 and earlier. The vulnerability arises from allowably crafting input sent to the server via the j_username parameter, enabling a remote attacker to retrieve information stored in the database. Multiple conne...

9.8CVSS9.6AI score0.02165EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/12 3:24 p.m.31 views

CVE-2024-1301 Multiple Vulnerabilities in Badger Meter's Monitool

SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the server via the jusername parameter and retrieve the information stored in the database...

9.8CVSS9.7AI score0.02165EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/12 3:24 p.m.24 views

CVE-2024-1301 Multiple Vulnerabilities in Badger Meter's Monitool

SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the server via the jusername parameter and retrieve the information stored in the database...

9.8CVSS9.5AI score0.02165EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.3 views

Malicious code in wlwz-2312-1301 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3d8fb58ab49c954b786d1b623ac20115f1a5cffbf2943de66a813dd9fcaeb9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2024/01/24 8:23 p.m.3 views

MAL-2024-288 Malicious code in wlwz-2312-1301 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3d8fb58ab49c954b786d1b623ac20115f1a5cffbf2943de66a813dd9fcaeb9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Circl
Circl
added 2024/01/04 4:5 a.m.8 views

CVE-2023-1301

creationtimestamp| type| source ---|---|--- 2024-01-04 04:05:03+00:00| seen| https://t.me/arpsyndicate/2425 2025-02-28 16:27:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5916...

9.8CVSS6.9AI score0.00791EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/11/03 12:0 a.m.38 views

F5 Networks BIG-IP : Apache HTTPD vulnerability (K78131906)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0.1. It is, therefore, affected by a vulnerability as referenced in the K78131906 advisory. A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to a...

5.9CVSS7AI score0.15564EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:36 a.m.3 views

SUSE CVE-2019-1301

A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'...

7.5CVSS6.8AI score0.0533EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/23 12:0 a.m.18 views

Ubuntu 16.04 ESM : libmodbus vulnerabilities (USN-5173-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5173-2 advisory. USN-5173-1 fixed vulnerabilities in libmodbus. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...

9.1CVSS7.6AI score0.01981EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.43 views

Oracle Linux 7 : httpd (ELSA-2020-1121)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1121 advisory. - Resolves: 1677496 - CVE-2018-17199 httpd: modsessioncookie does not respect expiry time - Resolves: 1565465 - CVE-2017-15710 httpd: Out of bound writ...

7.5CVSS6.5AI score0.19994EPSS
Exploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/28 10:3 p.m.60 views

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager (CVE-2017-15710, CVE-2017-15715, CVE-2018-1301).

Summary IBM WebSphere Application Server is shipped with IBM Tivoli Network Manager IP Edition versions 3.9 and 4.1.1; IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager IP Edition version 4.2. Information about a security vulnerability affecting IBM HTTP Server...

8.1CVSS7.4AI score0.86006EPSS
Exploits0Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/09 9:31 p.m.7 views

CVE-2023-1301 SourceCodester Friendly Island Pizza Website and Ordering System GET Parameter deleteorder.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this issue is some unknown functionality of the file deleteorder.php of the component GET Parameter Handler. The manipulation of the argument id...

6.5CVSS9.7AI score0.00791EPSS
Exploits1References3
CVE
CVE
added 2023/03/09 9:31 p.m.90 views

CVE-2023-1301

The CVE-2023-1301 entry concerns SourceCodester Friendly Island Pizza Website and Ordering System 1.0. The vulnerability is tied to the file deleteorder.php in the GET Parameter Handler, where manipulating the id argument leads to SQL injection. It is described as exploitable remotely and the exp...

9.8CVSS8.2AI score0.00791EPSS
Exploits1References3Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 6:47 p.m.92 views

K78131906: Apache HTTPD vulnerability CVE-2018-1301

Security Advisory Description A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug...

5.9CVSS6.9AI score0.15564EPSS
Exploits0Affected Software16
SUSE CVE
SUSE CVE
added 2023/02/15 5:31 a.m.5 views

SUSE CVE-2014-1301

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1...

6.8CVSS7.7AI score0.01868EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.39 views

Ubuntu: Security Advisory (USN-3937-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.18197EPSS
Exploits0References2
Circl
Circl
added 2022/07/04 4:12 p.m.7 views

CVE-2022-1301

creationtimestamp| type| source ---|---|--- 2022-07-04 16:12:32+00:00| seen| https://t.me/cibsecurity/45561...

4.8CVSS4.9AI score0.00565EPSS
Exploits2References1
ATTACKERKB
ATTACKERKB
added 2022/07/04 1:15 p.m.7 views

CVE-2022-1301

The WP Contact Slider WordPress plugin before 2.4.7 does not sanitize and escape the Text to Display settings of sliders, which could allow high privileged users such as editor and above to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

4.8CVSS5.5AI score0.00565EPSS
Exploits2References2
Cvelist
Cvelist
added 2022/07/04 1:5 p.m.27 views

CVE-2022-1301 WP Contact Slider < 2.4.7 - Editor+ Stored Cross-Site Scripting

The WP Contact Slider WordPress plugin before 2.4.7 does not sanitize and escape the Text to Display settings of sliders, which could allow high privileged users such as editor and above to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

5AI score0.00565EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2022/04/11 12:0 a.m.53 views

RHEL 8 : thunderbird (RHSA-2022:1301)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:1301 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.8.0. Security Fixes: Mozilla:...

8.8CVSS7.8AI score0.1446EPSS
Exploits7References20
Rows per page
Query Builder