Lucene search
+L

191 matches found

Tenable Nessus
Tenable Nessus
•added 2024/04/27 12:00 a.m.•46 views

RHEL 6 / 7 : httpd24 (RHSA-2018:3558)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3558 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. The httpd24 packages provide a recent stable release of...

10CVSS6.6AI score0.85452EPSS
SaveExploits0References89
Vulnrichment
Vulnrichment
•added 2024/03/12 3:24 p.m.•31 views

CVE-2024-1301 Multiple Vulnerabilities in Badger Meter's Monitool

SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the server via the jusername parameter and retrieve the information stored in the database...

9.8CVSS9.5AI score0.02165EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/12 3:24 p.m.•82 views

CVE-2024-1301

CVE-2024-1301 describes an SQL injection in Badger Meter Monitool affecting versions 4.6.3 and earlier. The vulnerability arises from allowably crafting input sent to the server via the j_username parameter, enabling a remote attacker to retrieve information stored in the database. Multiple conne...

9.8CVSS9.6AI score0.02165EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/12 3:24 p.m.•43 views

CVE-2024-1301 Multiple Vulnerabilities in Badger Meter's Monitool

SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the server via the jusername parameter and retrieve the information stored in the database...

9.8CVSS9.7AI score0.02165EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/01/24 8:23 p.m.•7 views

Malicious code in wlwz-2312-1301 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3d8fb58ab49c954b786d1b623ac20115f1a5cffbf2943de66a813dd9fcaeb9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/01/24 8:23 p.m.•1 views

Malware in wlwz-2312-1301

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/01/24 8:23 p.m.•10 views

MAL-2024-288 Malicious code in wlwz-2312-1301 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3d8fb58ab49c954b786d1b623ac20115f1a5cffbf2943de66a813dd9fcaeb9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Circl
Circl
•added 2024/01/04 4:05 a.m.•16 views

CVE-2023-1301

creationtimestamp| type| source ---|---|--- 2024-01-04 04:05:03+00:00| seen| https://t.me/arpsyndicate/2425 2025-02-28 16:27:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5916...

9.8CVSS6.9AI score0.00791EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2023/11/03 12:00 a.m.•47 views

F5 Networks BIG-IP : Apache HTTPD vulnerability (K78131906)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0.1. It is, therefore, affected by a vulnerability as referenced in the K78131906 advisory. A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to a...

5.9CVSS6.8AI score0.14991EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/10/31 2:36 a.m.•7 views

SUSE CVE-2019-1301

A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'...

7.5CVSS6.8AI score0.0533EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/10/23 12:00 a.m.•24 views

Ubuntu 16.04 ESM : libmodbus vulnerabilities (USN-5173-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5173-2 advisory. USN-5173-1 fixed vulnerabilities in libmodbus. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...

9.1CVSS7.6AI score0.01981EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/09/07 12:00 a.m.•47 views

Oracle Linux 7 : httpd (ELSA-2020-1121)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1121 advisory. - Resolves: 1677496 - CVE-2018-17199 httpd: modsessioncookie does not respect expiry time - Resolves: 1565465 - CVE-2017-15710 httpd: Out of bound writ...

7.5CVSS6.7AI score0.20156EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2023/06/28 10:03 p.m.•68 views

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager (CVE-2017-15710, CVE-2017-15715, CVE-2018-1301).

Summary IBM WebSphere Application Server is shipped with IBM Tivoli Network Manager IP Edition versions 3.9 and 4.1.1; IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager IP Edition version 4.2. Information about a security vulnerability affecting IBM HTTP Server...

8.1CVSS6.5AI score0.85452EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/09 9:31 p.m.•11 views

CVE-2023-1301 SourceCodester Friendly Island Pizza Website and Ordering System GET Parameter deleteorder.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this issue is some unknown functionality of the file deleteorder.php of the component GET Parameter Handler. The manipulation of the argument id...

6.5CVSS9.7AI score0.00791EPSS
SaveExploits1References3
CVE
CVE
•added 2023/03/09 9:31 p.m.•106 views

CVE-2023-1301

The CVE-2023-1301 entry concerns SourceCodester Friendly Island Pizza Website and Ordering System 1.0. The vulnerability is tied to the file deleteorder.php in the GET Parameter Handler, where manipulating the id argument leads to SQL injection. It is described as exploitable remotely and the exp...

9.8CVSS8.2AI score0.00791EPSS
SaveExploits1References3Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•99 views

K78131906: Apache HTTPD vulnerability CVE-2018-1301

Security Advisory Description A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug...

5.9CVSS6.7AI score0.14991EPSS
SaveExploits0Affected Software16
SUSE CVE
SUSE CVE
•added 2023/02/15 5:31 a.m.•8 views

SUSE CVE-2014-1301

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1...

6.8CVSS7.7AI score0.01861EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•45 views

Ubuntu: Security Advisory (USN-3937-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7AI score0.17434EPSS
SaveExploits0References2
Mend
Mend
•added 2022/07/11 12:00 a.m.•1 views

MSC-2022-1301

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malware dropper – this package contains a Trojan...

9.8CVSS5.8AI score
SaveExploits0References1
Circl
Circl
•added 2022/07/04 4:12 p.m.•19 views

CVE-2022-1301

creationtimestamp| type| source ---|---|--- 2022-07-04 16:12:32+00:00| seen| https://t.me/cibsecurity/45561...

4.8CVSS4.9AI score0.00588EPSS
SaveExploits2References1
Rows per page
Query Builder