Lucene search
+L

5008 matches found

OSV
OSV
added 2022/06/20 8:24 p.m.10 views

MAL-2022-6829 Malicious code in usaa-axios-factory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55764e17e8e75cf7f02547f828d98aae791cd34ba49a468a9650dfe1e9e57ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:24 p.m.5 views

Malicious code in usaa-axios-factory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55764e17e8e75cf7f02547f828d98aae791cd34ba49a468a9650dfe1e9e57ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:13 p.m.6 views

Malicious code in axios-replace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a686c9db8b278dabb3e76765ae41fd7caae4c05302f3ee663c7ff6781c5d4f1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:13 p.m.8 views

MAL-2022-1210 Malicious code in axios-replace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a686c9db8b278dabb3e76765ae41fd7caae4c05302f3ee663c7ff6781c5d4f1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2022/06/13 5:09 p.m.32 views

Security Bulletin: IBM Sterling Control Center is vulnerable to server-side request forgery due to Node.js axios module (CVE-2020-28168)

Summary Node.js axios module is used by IBM Sterling Control Center. A server-side request forgery vulnerability in Node.js axios module has been addressed. Vulnerability Details CVEID: CVE-2020-28168 DESCRIPTION: Node.js axios module is vulnerable to server-side request forgery, caused by improp...

5.9CVSS1.1AI score0.02348EPSS
SaveExploits1Affected Software1
GithubExploit
GithubExploit
added 2022/06/12 3:06 a.m.838 views

Exploit for Uncontrolled Resource Consumption in Axios

Axios Regular Expression Denial Of Service Attack This repo h...

7.8CVSS7.4AI score0.08515EPSS
SaveExploits2
NVD
NVD
added 2022/06/09 5:15 p.m.19 views

CVE-2019-25069

A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure ASP.NET. The attack may be initiated remotely...

7.5CVSS0.00821EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/09 5:15 p.m.8 views

CVE-2019-25069

A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure ASP.NET. The attack may be initiated remotely...

7.5CVSS6.4AI score0.00821EPSS
SaveExploits0References2
NVD
NVD
added 2022/06/09 5:15 p.m.20 views

CVE-2019-25068

A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be initiated remotely...

8.8CVSS0.00551EPSS
SaveExploits0References1
Prion
Prion
added 2022/06/09 5:15 p.m.18 views

Design/Logic Flaw

A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be initiated remotely...

6.5CVSS8.7AI score0.00551EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/06/09 5:15 p.m.14 views

Design/Logic Flaw

A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure ASP.NET. The attack may be initiated remotely...

5CVSS7.3AI score0.00821EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/09 1:10 p.m.30 views

CVE-2019-25069 Axios Italia Axios RE Error Message ASP.NET information disclosure

A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure ASP.NET. The attack may be initiated remotely...

5.3CVSS7.4AI score0.00821EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/06/09 1:10 p.m.3 views

CVE-2019-25069 Axios Italia Axios RE Error Message ASP.NET information disclosure

A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure ASP.NET. The attack may be initiated remotely...

5.3CVSS7.5AI score0.00821EPSS
SaveExploits0References2
CVE
CVE
added 2022/06/09 1:10 p.m.55 views

CVE-2019-25069

Axios RE (Axios Italia) 1.7.0/7.0.0 contains a vulnerability in the Error Message Handler that can enable remote information disclosure in ASP.NET. The issue stems from how the Error Message Handler processes errors, with CVSS‑3.1 base score 7.5 (HIGH) and network attack vector, no privileges req...

7.5CVSS6.1AI score0.00821EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/09 1:10 p.m.31 views

CVE-2019-25068 Axios Italia Axios RE Connection REDefault.aspx privileges management

A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be initiated remotely...

6.3CVSS8.8AI score0.00551EPSS
SaveExploits0References1
CVE
CVE
added 2022/06/09 1:10 p.m.50 views

CVE-2019-25068

CVE-2019-25068 affects Axios Italia Axios RE 1.7.0/7.0.0. The vulnerability originates in the file REDefault.aspx of the Connection Handler, where manipulating the argument DBIDX can lead to privilege escalation. The attack can be initiated remotely, indicating potential remote exploitation. Conn...

8.8CVSS7.6AI score0.00551EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/06/09 1:10 p.m.4 views

CVE-2019-25068 Axios Italia Axios RE Connection REDefault.aspx privileges management

A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be initiated remotely...

6.3CVSS9AI score0.00551EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/06/09 12:00 a.m.9 views

Axios Italia Axios RE 安全漏洞

Axios Italia Axios RE is a suite of electronic enrollment software for campus administration. Axios Italia Axios RE 1.7.0/7.0.0 contains a security vulnerability that originates from a problem with the file REDefault.aspx in the component connection handler. An attacker can exploit the...

8.8CVSS7.8AI score0.00551EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/06/09 12:00 a.m.7 views

Axios Italia Axios RE 信息泄露漏洞

Axios Italia Axios RE is a suite of electronic enrollment software for campus management. A security vulnerability exists in Axios Italia Axios RE 1.7.0/7.0.0 that originates from a problem with the component error message handler. An attacker can exploit the vulnerability to obtain sensitive...

7.5CVSS7.3AI score0.00821EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2022/04/15 5:55 a.m.15 views

kipor.vn Cross Site Scripting vulnerability OBB-2515419

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rows per page
Query Builder