Lucene search
+L

407 matches found

OSV
OSV
added 2023/03/23 9:00 p.m.19 views

CVE-2023-1613 Rebuild publish cross site scripting

A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This vulnerability affects unknown code of the file /feeds/post/publish. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

3.5CVSS3.7AI score
SaveExploits0References5
Cvelist
Cvelist
added 2023/03/23 8:31 p.m.34 views

CVE-2023-1612 Rebuild list-file sql injection

A vulnerability, which was classified as critical, was found in Rebuild up to 3.2.3. This affects an unknown part of the file /files/list-file. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It...

6.5CVSS10AI score0.00744EPSS
SaveExploits1References3
Prion
Prion
added 2023/03/23 8:15 p.m.25 views

Sql injection

A vulnerability, which was classified as critical, has been found in Rebuild up to 3.2.3. Affected by this issue is some unknown functionality of the file /project/tasks/list. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the publi...

6.5CVSS9.6AI score0.00677EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/03/23 8:00 p.m.68 views

CVE-2023-1610

CVE-2023-1610 affects Rebuild versions up to 3.2.3. The vulnerability is an SQL injection in an unknown portion of the system, specifically involving the file /project/tasks/list. The issue can be exploited remotely, and exploitation has been publicly disclosed. Multiple connected sources corrobo...

9.8CVSS8.2AI score0.00677EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/23 12:00 a.m.16 views

PT-2023-17116 · Rebuild · Rebuild

Name of the Vulnerable Software and Affected Versions: Rebuild versions up to 3.2.3 Description: A critical issue has been found in Rebuild, affecting some unknown functionality of the file /project/tasks/list. The manipulation leads to sql injection. The attack may be launched remotely...

9.8CVSS7.1AI score0.00677EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/03/23 12:00 a.m.13 views

Rebuild SQL注入漏洞

Rebuild is a highly customizable enterprise management system. A security vulnerability exists in Rebuild 3.2.3 and earlier versions, which stems from the discovery of an SQL injection vulnerability contained in the file /project/tasks/list...

9.8CVSS7.1AI score0.00677EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/03/23 12:00 a.m.8 views

Rebuild 跨站脚本漏洞

Rebuild is a highly customizable enterprise management system. A security vulnerability exists in Rebuild 3.2.3 and earlier versions, which stems from a problem with the file /feeds/post/publish and can lead to cross-site scripting...

6.1CVSS4.3AI score0.00523EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/03/23 12:00 a.m.11 views

PT-2023-17118 · Rebuild · Rebuild

Name of the Vulnerable Software and Affected Versions: Rebuild versions up to 3.2.3 Description: A vulnerability has been found in Rebuild, affecting unknown code of the file /feeds/post/publish, leading to cross site scripting. The attack can be initiated remotely. Recommendations: For Rebuild...

6.1CVSS4.4AI score0.00523EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/03/23 12:00 a.m.10 views

PT-2023-17117 · Rebuild · Rebuild

Name of the Vulnerable Software and Affected Versions: Rebuild versions up to 3.2.3 Description: A critical issue was found in Rebuild, affecting an unknown part of the file /files/list-file, leading to sql injection. The manipulation can be initiated remotely. Recommendations: For versions up to...

9.8CVSS6.9AI score0.00744EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/03/23 12:00 a.m.9 views

Rebuild SQL注入漏洞

Rebuild is a highly customizable enterprise management system. A security vulnerability exists in Rebuild 3.2.3 and earlier versions, which stems from the discovery of an SQL injection vulnerability contained in the file /files/list-file...

9.8CVSS7.1AI score0.00744EPSS
SaveExploits1References4
NVD
NVD
added 2023/03/19 12:15 a.m.22 views

CVE-2023-1495

A vulnerability classified as critical was found in Rebuild up to 3.2.3. Affected by this vulnerability is the function queryListOfConfig of the file /admin/robot/approval/list. The manipulation of the argument q leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS7.4AI score0.00715EPSS
SaveExploits1References4
OSV
OSV
added 2023/03/18 11:31 p.m.16 views

CVE-2023-1495 Rebuild list queryListOfConfig sql injection

A vulnerability classified as critical was found in Rebuild up to 3.2.3. Affected by this vulnerability is the function queryListOfConfig of the file /admin/robot/approval/list. The manipulation of the argument q leads to sql injection. The attack can be launched remotely. The exploit has been...

6.3CVSS6.2AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/03/18 12:00 a.m.11 views

PT-2023-17032 · Rebuild · Rebuild

Name of the Vulnerable Software and Affected Versions: Rebuild versions up to 3.2.3 Description: A critical vulnerability was found in the function queryListOfConfig of the file /admin/robot/approval/list. The manipulation of the argument q leads to sql injection. The attack can be launched...

8.8CVSS7AI score0.00715EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/02/17 12:00 a.m.9 views

PT-2023-19549 · Wpdevart · Wpdevart Booking Calendar

Name of the Vulnerable Software and Affected Versions: WpDevArt Booking calendar, Appointment Booking System plugin versions = 3.2.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that affects plugin forms actions, including create, duplicate, edit, and delete...

5.4CVSS5.4AI score0.00231EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/02/17 12:00 a.m.10 views

WordPress Plugin Booking calendar, Appointment Booking System 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

5.4CVSS5.5AI score0.00231EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.10 views

SUSE CVE-2004-0690

The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory...

4.6CVSS6.7AI score0.00518EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:40 a.m.7 views

SUSE CVE-2021-33036

In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher...

9CVSS9.9AI score0.03773EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:39 a.m.10 views

SUSE CVE-2021-37404

There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher...

9.8CVSS10AI score0.03168EPSS
SaveExploits0References3
OSV
OSV
added 2023/01/30 9:15 p.m.8 views

CVE-2022-4654

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

5.4CVSS5.8AI score
SaveExploits0References1
CNNVD
CNNVD
added 2023/01/30 12:00 a.m.12 views

WordPress plugin Pricing Tables WordPress Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

5.4CVSS5.4AI score0.00471EPSS
SaveExploits2References2
Rows per page
Query Builder