Lucene search
+L

1302 matches found

Prion
Prion
added 2023/04/02 9:15 p.m.26 views

Buffer overflow

IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616...

7.5CVSS9.4AI score0.00656EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2023/04/02 12:00 a.m.23 views

IBM Aspera 缓冲区错误漏洞

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. A code execution vulnerability exists in IBM Aspera Cargo and IBM Aspera Connect that originates from a boundary check error and can be exploited by an attack...

9.8CVSS8AI score0.00656EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/02 12:00 a.m.19 views

IBM Aspera 缓冲区错误漏洞

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. A code execution vulnerability exists in IBM Aspera Cargo and IBM Aspera Connect that originates from a boundary check error and can be exploited by an attack...

9.8CVSS8.2AI score0.00656EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/30 9:15 p.m.16 views

CVE-2023-1740

A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/user/manageuser.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible...

9.8CVSS5.7AI score0.00728EPSS
SaveExploits1References3
NVD
NVD
added 2023/03/30 9:15 p.m.27 views

CVE-2023-1740

A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/user/manageuser.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible...

9.8CVSS6.3AI score0.00728EPSS
SaveExploits1References3
Prion
Prion
added 2023/03/30 9:15 p.m.33 views

Sql injection

A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/user/manageuser.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible...

5.8CVSS9.7AI score0.00728EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/03/30 9:00 p.m.79 views

CVE-2023-1740

CVE-2023-1740 affects SourceCodester Air Cargo Management System 1.0, where the GET Parameter Handler in admin/user/manage_user.php is vulnerable to SQL injection via the id argument. Exploitation is remote and the vulnerability has been disclosed publicly. Multiple connected sources corroborate ...

9.8CVSS7.4AI score0.00728EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/30 9:00 p.m.41 views

CVE-2023-1740 SourceCodester Air Cargo Management System GET Parameter manage_user.php sql injection

A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/user/manageuser.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible...

5.8CVSS10AI score0.00728EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/03/30 12:00 a.m.9 views

Air Cargo Management System SQL注入漏洞

Air Cargo Management System is an air cargo management system. A security vulnerability exists in SourceCodester Air Cargo Management System version 1.0, which is caused by an incorrect manipulation of the parameter id resulting in sql injection...

9.8CVSS5.8AI score0.00728EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/03/30 12:00 a.m.15 views

PT-2023-17205 · Sourcecodester · Sourcecodester Garage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Air Cargo Management System version 1.0 Description: A critical issue was found in the SourceCodester Air Cargo Management System. It affects an unknown function of the file admin/user/manage user.php, specifically the componen...

9.8CVSS5.4AI score0.00728EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2023/03/28 8:07 p.m.33 views

CVE-2023-27286 IBM Aspera code execution

IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616...

8.4CVSS9.4AI score0.00656EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/28 8:07 p.m.75 views

CVE-2023-27286

CVE-2023-27286 affects IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5, with a buffer overflow caused by improper bounds checking in the affected components. The vulnerability could allow an attacker to overflow a buffer and execute arbitrary code on the system. Remediation is available in IB...

9.8CVSS9.3AI score0.00656EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2023/03/28 8:07 p.m.32 views

CVE-2023-27284 IBM Aspera code execution

IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616...

8.4CVSS9.4AI score0.00656EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/28 8:07 p.m.94 views

CVE-2023-27284

IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are affected by a buffer overflow caused by improper bounds checking. According to IBM and Red Hat/PRION entries, the vulnerability allows code execution on the system and is addressed by upgrading to version 4.2.5 (remediation included in the I...

9.8CVSS9.3AI score0.00656EPSS
SaveExploits0References2Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/28 1:42 a.m.122 views

Security Bulletin: IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 have addressed multiple buffer overflow vulnerabilities (CVE-2023-27286, CVE-2023-27284)

Summary This Security Bulletin addresses security vulnerabilities that have been remediated in IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5. Vulnerability Details CVEID:CVE-2023-27286 DESCRIPTION: IBM Aspera Cargo and IBM Aspera Connect are vulnerable to a buffer overflow, caused by improp...

9.8CVSS9.7AI score0.00656EPSS
SaveExploits0Affected Software11
Positive Technologies
Positive Technologies
added 2023/03/28 12:00 a.m.22 views

PT-2023-21052 · Ibm · Ibm Aspera Connect +1

Name of the Vulnerable Software and Affected Versions: IBM Aspera Cargo version 4.2.5 IBM Aspera Connect version 4.2.5 Description: The issue is caused by improper bounds checking, leading to a buffer overflow. An attacker could exploit this to execute arbitrary code on the system. Recommendation...

9.8CVSS9.8AI score0.00656EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/03/28 12:00 a.m.21 views

PT-2023-21050 · Ibm · Ibm Aspera Connect +1

Name of the Vulnerable Software and Affected Versions: IBM Aspera Cargo version 4.2.5 IBM Aspera Connect version 4.2.5 Description: The issue is caused by improper bounds checking, leading to a buffer overflow. An attacker could exploit this to execute arbitrary code on the system. Recommendation...

9.8CVSS9.7AI score0.00656EPSS
SaveExploits0References4
vulnersOsv
vulnersOsv
added 2023/03/24 10:01 p.m.11 views

aesti (>=0.1.0, <=0.3.0), atarashii_imap (0.3.0) +382 more potentially affected by unknown CVE via openssl (>=0.9.24, <=0.10.40)

openssl CARGO version =0.9.24, =0.1.0, =0.1.0, =0.0.0, =0.2.0, =0.15.0, =0.3.1, =0.0.1, =0.3.2, =0.1.1, =0.1.4, =0.1.0, =0.1.3, =0.1.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9QWG-CRG9-M2VC...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2023/03/24 9:59 p.m.3 views

core-lib (>=0.1.0, <=0.2.0), eventsourced-nats (>=0.1.0, <=0.6.0) +26 more potentially affected by unknown CVE via async-nats (>=0.9.18, <=0.21.0)

async-nats CARGO version =0.9.18, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =0.26.0, =0.25.0, =0.1.0, =0.12.0-alpha.1, =0.9.0, =0.16.0, =0.21.0 - wasmcloud-example-runner 0.4.0 - wasmcloud-examples-payments 0.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F5V5-CCQC-6W36...

5.5AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2023/03/24 12:00 p.m.4 views

core-lib (>=0.1.0, <=0.2.0), eventsourced-nats (>=0.1.0, <=0.6.0) +26 more potentially affected by unknown CVE via async-nats (>=0.9.18, <=0.21.0)

async-nats CARGO version =0.9.18, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =0.26.0, =0.25.0, =0.1.0, =0.12.0-alpha.1, =0.9.0, =0.16.0, =0.21.0 - wasmcloud-example-runner 0.4.0 - wasmcloud-examples-payments 0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0027...

5.5AI score
SaveExploits0
Rows per page
Query Builder