Lucene search
+L

2501 matches found

Positive Technologies
Positive Technologies
added 2022/09/26 12:00 a.m.7 views

PT-2022-25623 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: The issue is related to an arbitrary file upload vulnerability in the picture upload point of the "save event" file of the "Events" module in the background management system. This vulnerability ...

7.2CVSS6.8AI score0.00974EPSS
SaveExploits1References5
NVD
NVD
added 2022/09/22 4:15 p.m.22 views

CVE-2022-40932

In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system...

7.2CVSS0.00954EPSS
SaveExploits1References1
Prion
Prion
added 2022/09/22 4:15 p.m.18 views

Privilege escalation

In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system...

5.8CVSS7AI score0.00954EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/09/22 3:59 p.m.32 views

CVE-2022-40932

In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system...

7.3AI score0.00954EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/09/22 12:00 a.m.9 views

PT-2022-25630 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: The issue is related to an arbitrary file upload vulnerability. This vulnerability is located in the picture upload point of the gallery file of the Gallery module in the background management...

7.2CVSS6.8AI score0.00954EPSS
SaveExploits1References3
MSRC
MSRC
added 2022/09/07 7:00 a.m.21 views

Curious, Innovative, Creative, Community Driven: Meet Cyb3rWard0g, Roberto Rodriquez

When I grow up I want to be? Dancer or a veterinarian Happiest memories: Tearing up the dance floor at weddings and playing soccer in the streets of Lima, Peru Previous Job roles : Mopped floors for McDonalds, packed boxes at an Avon warehouse, Manager at Olive Garden, Beer taster/server and then...

3.7AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/09/01 3:15 a.m.6 views

CVE-2022-36671

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API...

7.5CVSS7.2AI score0.00407EPSS
SaveExploits1References2
NVD
NVD
added 2022/09/01 3:15 a.m.32 views

CVE-2022-36671

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API...

7.5CVSS0.00407EPSS
SaveExploits1References1
Prion
Prion
added 2022/09/01 3:15 a.m.24 views

Arbitrary file deletion

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API...

5CVSS7.6AI score0.00407EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/09/01 2:08 a.m.26 views

CVE-2022-36671

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API...

7.5AI score
SaveExploits0References3
CNNVD
CNNVD
added 2022/09/01 12:00 a.m.8 views

novel-plus 安全漏洞

novel-plus novel-plus is a multi-end PC, WAP reading, full-featured original literature CMS system. A security vulnerability exists in novel-plus v3.6.2, which can be exploited to download arbitrary files via the background file download API...

7.5CVSS7.5AI score0.00407EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/09/01 12:00 a.m.10 views

PT-2022-23541 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus version 3.6.2 Description: The issue allows for an arbitrary file download via the "background file download API". Recommendations: For Novel-Plus version 3.6.2, consider restricting access to the background file download API until...

7.5CVSS7.6AI score0.00407EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/08/29 12:00 a.m.13 views

The vulnerability of the Background Fetch component in Google Chrome and Microsoft Edge browsers allows attackers to disclose protected information.

The vulnerability of the Background Fetch component in Google Chrome and Microsoft Edge is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created web page...

7.8CVSS6.7AI score0.00773EPSS
SaveExploits0References13Affected Software7
OSV
OSV
added 2022/08/19 5:15 p.m.10 views

CVE-2022-36578

jizhicms v2.3.1 has SQL injection in the background...

9.8CVSS5.8AI score0.00893EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/19 5:15 p.m.4 views

CVE-2022-37254

DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting XSS via Background - System - system function - configuration management...

5.4CVSS6.1AI score0.00463EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/19 5:15 p.m.10 views

CVE-2022-36225

EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery CSRF via the background, column management function and add...

8.8CVSS5.8AI score0.00468EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/19 5:15 p.m.6 views

CVE-2022-36225

EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery CSRF via the background, column management function and add...

8.8CVSS7.3AI score0.00468EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/08/19 4:43 p.m.40 views

CVE-2022-36225

EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery CSRF via the background, column management function and add...

9AI score0.00468EPSS
SaveExploits1References1
OPENSUSE Linux
OPENSUSE Linux
added 2022/08/16 12:00 a.m.52 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10092-1 Rating: important References: 1202075 Cross-References: CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612...

8.8CVSS6.8AI score0.00923EPSS
SaveExploits3References1
NVD
NVD
added 2022/08/12 8:15 p.m.29 views

CVE-2022-2610

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS0.00773EPSS
SaveExploits0References4
Rows per page
Query Builder