Lucene search
+L

179 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/02 12:00 a.m.•0 views

CVE-2021-45478: Improper Handling of Parameters

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2...

6.5CVSS5.8AI score0.0059EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/03/02 12:00 a.m.•14 views

YORDAM University Library Automation System 安全漏洞

YORDAM University Library Automation System is a university library automation system from YORDAM. A security vulnerability exists in the YORDAM University Library Automation System prior to version 19.2, which stems from mishandling of the system's parameters and allows the collection of...

6.5CVSS6.4AI score0.0059EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/03/02 12:00 a.m.•26 views

PT-2023-12561 · Unknown · Library Automation System

Name of the Vulnerable Software and Affected Versions: Library Automation System versions prior to 19.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, which allows Stored XSS in the Library Automation System. This can lead to the execution of...

5.4CVSS5.2AI score0.00355EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/02 12:00 a.m.•1 views

CVE-2021-45477: Improper Handling of Parameters

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2...

6.5CVSS5.8AI score0.0059EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/02/17 12:00 a.m.•25 views

The vulnerability of the Apex-VUZ education automation system, related to the use of strictly encrypted user data, allows a perpetrator to gain full access to the software environment.

The vulnerability of the Apex-VUZ education automation system is related to the use of strictly encrypted user data. Exploiting this vulnerability could allow a malicious actor to gain full access to the software environment...

10CVSS5.5AI score
SaveExploits0Affected Software1
CNVD
CNVD
•added 2022/12/14 12:00 a.m.•85 views

Siemens APOGEE/TALON Field Panels Privilege Management Vulnerability

APOGEE PXC Modular and Compact Series Direct Digital Control DDC devices, part of the APOGEE Automation System. TALON TC Modular and Compact Series Direct Digital Control DDC devices, part of the TALON Automation System. Siemens APOGEE/TALON Field Panels contain a privilege management vulnerabili...

8.8CVSS3.6AI score0.0063EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/12 12:00 a.m.•16 views

PT-2022-6295 · Unknown · Apex-Vuz Automation System

Name of the Vulnerable Software and Affected Versions: Apex-VUZ automation system affected versions not specified Description: The issue is related to the messaging component of the custom file upload module in the Apex-VUZ automation system. It involves the unrestricted upload of dangerous file...

10CVSS7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/12 12:00 a.m.•8 views

PT-2022-6297 · Апекс-Вуз · Апекс-Вуз

Name of the Vulnerable Software and Affected Versions: Апекс-ВУЗ affected versions not specified Description: The issue is related to the use of hardcoded credentials in the Апекс-ВУЗ education automation system. Exploitation of this issue may allow a remote attacker to gain full access to the...

10CVSS7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/12 12:00 a.m.•18 views

PT-2022-6293 · Апекс-Вуз · Апекс-Вуз

Name of the Vulnerable Software and Affected Versions: Апекс-ВУЗ affected versions not specified Description: The issue is related to the password reset mechanism in the education automation system, which uses the SHA-1 encryption algorithm with insufficient strength. This could allow a remote...

5CVSS7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/12 12:00 a.m.•22 views

PT-2022-6301 · Unknown · Apex-Vuz Automation System

Name of the Vulnerable Software and Affected Versions: Apex-VUZ automation system affected versions not specified Description: The issue is related to the component responsible for creating new accounts in the Apex-VUZ automation system. It is associated with inadequate control over interaction...

7.8CVSS7.2AI score
SaveExploits0References1
NVD
NVD
•added 2022/09/22 9:15 a.m.•29 views

CVE-2022-2266

University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability. This has been fixed in the version 19.2...

6.1CVSS0.00437EPSS
SaveExploits0References2
Prion
Prion
•added 2022/09/22 9:15 a.m.•30 views

Cross site scripting

University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability. This has been fixed in the version 19.2...

5.8CVSS6.1AI score0.00437EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/09/22 8:50 a.m.•40 views

CVE-2022-2266 Reflected XSS University Library Automation System

University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability. This has been fixed in the version 19.2...

6.1CVSS6.2AI score0.00437EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/09/22 8:50 a.m.•10 views

CVE-2022-2266 Reflected XSS University Library Automation System

University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability. This has been fixed in the version 19.2...

6.1CVSS6.1AI score0.00437EPSS
SaveExploits0References2
CVE
CVE
•added 2022/09/22 8:50 a.m.•73 views

CVE-2022-2266

CVE-2022-2266 involves the University Library Automation System from Yordam Bilgi Teknolojileri, with versions prior to 19.2 vulnerable to an unauthenticated Reflected XSS vulnerability. The flaw is documented across multiple sources (NVD, CVE lists, and third-party advisories) and is described a...

6.1CVSS6.1AI score0.00437EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2022/09/22 8:20 a.m.•18 views

CVE-2022-2266

University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability. This has been fixed in the version 19.2...

6.1CVSS6.3AI score0.00437EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/09/22 12:00 a.m.•13 views

YORDAM University Library Automation System 跨站脚本漏洞

YORDAM University Library Automation System is a university library automation system from YORDAM. A cross-site scripting vulnerability exists in YORDAM University Library Automation System versions prior to 19.2. An attacker could exploit this vulnerability to conduct cross-site scripting attack...

6.1CVSS6AI score0.00437EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/22 12:00 a.m.•16 views

PT-2022-15608 · Unknown · University Library Automation System

Name of the Vulnerable Software and Affected Versions: University Library Automation System versions prior to 19.2 Description: The issue is related to an unauthenticated Reflected XSS vulnerability. This vulnerability has been fixed in version 19.2. Recommendations: For versions prior to 19.2,...

6.1CVSS6.3AI score0.00437EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/09/21 8:45 a.m.•6 views

CVE-2022-0495 SQL Injection in KOHA

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01...

9.4CVSS8.3AI score0.00749EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/09/21 12:00 a.m.•13 views

KOHA SQL注入漏洞

KOHA is a library automation system product by Parantez Teknoloji Individual Developer A security vulnerability exists in Parantez Teknoloji KOHA versions prior to 19.05.03, which stems from the presence of unverified SQL injection...

9.8CVSS8.4AI score0.00749EPSS
SaveExploits0References2
Rows per page
Query Builder