Lucene search
+L

145 matches found

OSV
OSV
added 2023/04/05 7:15 p.m.7 views

CVE-2023-1522

SQL Injection in the Hardware Inventory report of Security Center 5.11.2...

8.8CVSS7.4AI score0.00598EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/05 7:15 p.m.34 views

CVE-2023-1522

SQL Injection in the Hardware Inventory report of Security Center 5.11.2...

8.8CVSS9.1AI score0.00598EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/04/05 6:51 p.m.6 views

CVE-2023-1522

SQL Injection in the Hardware Inventory report of Security Center 5.11.2...

9.2AI score0.00598EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/05 6:51 p.m.59 views

CVE-2023-1522

CVE-2023-1522 affects Genetec Security Center, specifically the SQL injection vulnerability in the Hardware Inventory report, observed in version 5.11.2. The public descriptions across multiple sources concur that the issue arises from a SQL injection in the Hardware Inventory report component, w...

8.8CVSS9.1AI score0.00598EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:00 a.m.20 views

The vulnerability of the SICAM TOOLBOX II engineering software lies in the insufficient protection of the data transfer control protocol, allowing attackers to bypass access controls in the database service.

The vulnerability of the SICAM TOOLBOX II engineering software is related to insufficient protection of the data transfer control protocol. Exploiting this vulnerability can allow a malicious actor to gain access to the database using the 1522 TCP port...

9.9CVSS6.5AI score0.00675EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:15 a.m.6 views

SUSE CVE-2006-1522

The sysaddkey function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service OOPS via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the...

4.9CVSS6.7AI score0.00438EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/09/06 10:19 p.m.6 views

CVE-2022-1522 Cognex 3D-A1000 Dimensioning System Improper Output Neutralization for Logs

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 3354 and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password as having been changed when it is not, complicating forensics...

5.3CVSS5.4AI score0.00508EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/09/06 10:19 p.m.40 views

CVE-2022-1522 Cognex 3D-A1000 Dimensioning System Improper Output Neutralization for Logs

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 3354 and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password as having been changed when it is not, complicating forensics...

5.3CVSS5.7AI score0.00508EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/06 10:19 p.m.68 views

CVE-2022-1522

CVE-2022-1522 affects Cognex 3D-A1000 Dimensioning System firmware 1.0.3 (3354) and earlier. The vulnerability is CWE-117: Improper Output Neutralization for Logs, enabling an attacker to forge log entries that falsely indicate a password change, complicating forensics. Connected advisories confi...

5.3CVSS5.8AI score0.00508EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.25 views

Mageia: Security Advisory (MGASA-2014-0259)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.3AI score0.07749EPSS
SaveExploits7References13
Circl
Circl
added 2021/08/04 11:23 p.m.9 views

CVE-2021-1522

creationtimestamp| type| source ---|---|--- 2021-08-04 23:23:46+00:00| seen| https://t.me/cibsecurity/26850...

4.3CVSS4.7AI score0.00748EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/04 5:20 p.m.78 views

CVE-2021-1522

CVE-2021-1522 describes a weakness in Cisco Connected Mobile Experiences (CMX) where the server-side change-password API does not sufficiently enforce the configured password policy. An authenticated, remote attacker could use a crafted API request to change their own password to a value that vio...

4.3CVSS4.8AI score0.00748EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/07/13 12:00 a.m.272 views

Amazon Linux AMI : nspr, nss-softokn, nss-util (ALAS-2021-1522)

The version of nspr installed on the remote host is prior to 4.25.0-2.45. The version of nss-softokn installed on the remote host is prior to 3.53.1-6.46. The version of nss-util installed on the remote host is prior to 3.53.1-1.58. It is, therefore, affected by multiple vulnerabilities as...

10CVSS8AI score0.03596EPSS
SaveExploits1References21
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2013:1522-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.6AI score0.69008EPSS
SaveExploits7References2
Cvelist
Cvelist
added 2020/08/17 7:13 p.m.24 views

CVE-2020-1522 Windows Speech Runtime Elevation of Privilege Vulnerability

...

7.8CVSS8.6AI score0.01003EPSS
SaveExploits0References1
CVE
CVE
added 2020/08/17 7:13 p.m.137 views

CVE-2020-1522

CVE-2020-1522 is a Windows Elevation of Privilege vulnerability in the Windows Speech Runtime caused by improper memory handling. The human-authored description states that an attacker who already has code execution on the victim machine could run a crafted application to elevate privileges. Micr...

7.8CVSS7.9AI score0.01003EPSS
SaveExploits0References1Affected Software3
OpenVAS
OpenVAS
added 2020/08/04 12:00 a.m.27 views

D-Link DAP-1522 <= 1.42 Authentication Bypass Vulnerability

D-Link DAP-1522 is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.7AI score0.0172EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/08/03 12:00 a.m.20 views

D-Link DAP-1522 Authentication Bypass Vulnerability (CVE-2020-15896)

The D-Link DAP-1522 is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

7.5CVSS7.7AI score0.0172EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/07/23 12:00 a.m.10 views

D-Link DAP-1522 Authentication Bypass Vulnerability

The D-Link DAP-1522 is a wireless access point product from AUO D-Link of Taiwan, China. A security vulnerability exists in version 1.4x of the D-Link DAP-1522 prior to 1.10b04Beta02. An attacker can exploit the vulnerability to bypass authentication and gain direct access to the application...

7.5CVSS7.2AI score0.0172EPSS
SaveExploits0References1
OSV
OSV
added 2020/07/22 7:15 p.m.9 views

CVE-2020-15896

An authentication-bypass issue was discovered on D-Link DAP-1522 devices 1.4x before 1.10b04Beta02. There exist a few pages that are directly accessible by any unauthorized user, e.g., logout.php and login.php. This occurs because of checking the value of NONEEDAUTH. If the value of NONEEDAUTH is...

7.5CVSS7.1AI score0.0172EPSS
SaveExploits0References2
Rows per page
Query Builder