Lucene search
+L

8736 matches found

NVD
NVD
•added 2023/10/12 12:15 p.m.•20 views

CVE-2023-5046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Procost: before 1390...

9.8CVSS10AI score0.00651EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/10/12 12:15 p.m.•9 views

CVE-2023-5045

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Kayisi: before 1286...

9.8CVSS7.4AI score0.00651EPSS
SaveExploits0References3
OSV
OSV
•added 2023/10/12 12:15 p.m.•13 views

CVE-2023-5046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Procost: before 1390...

9.8CVSS5.8AI score0.00651EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/10/12 12:15 p.m.•8 views

CVE-2023-5046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Procost: before 1390...

9.8CVSS7.4AI score0.00651EPSS
SaveExploits0References3
Prion
Prion
•added 2023/10/12 12:15 p.m.•20 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Procost: before 1390...

7.5CVSS9.8AI score0.00651EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/12 11:58 a.m.•38 views

CVE-2023-5045 SQLi in Biltay's Kayısı

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Kayisi: before 1286...

9.8CVSS10AI score0.00651EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/10/12 11:55 a.m.•29 views

CVE-2023-5046 SQLi in Biltay's Procost

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Procost: before 1390...

9.8CVSS10AI score0.00651EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/12 12:00 a.m.•17 views

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved Security Vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system designed for use with the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK...

8.8CVSS6.9AI score0.00582EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/10/12 12:00 a.m.•13 views

Juniper Networks Junos OS Buffer Error Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS, which is caused by a stack-based buffer overfl...

5.5CVSS7.3AI score0.00163EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/10/12 12:00 a.m.•25 views

Juniper Networks Junos and Junos EVO Buffer Error Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos and Junos EVO, which is caused by a stack-based buffer overflow...

5.5CVSS7.3AI score0.00163EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2023/10/12 12:00 a.m.•38 views

The vulnerability of the CLI microprogramming software for D-Link routers such as DIR-2150 and DIR-1260 allows a hacker to execute arbitrary code.

The vulnerability of the CLI microprogramming software-based D-Link DIR-2150 and DIR-1260 routers is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.1AI score0.00997EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/10/12 12:00 a.m.•16 views

Juniper Networks Junos OS Buffer Error Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has a security vulnerability that originates from a buffer overflow vulnerability in a CLI...

5.5CVSS7.3AI score0.00163EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/10/12 12:00 a.m.•9 views

PT-2023-31563

Name of the Vulnerable Software and Affected Versions Biltay Technology Procost versions prior to 1390 Description The issue is related to an SQL Injection vulnerability, allowing for improper neutralization of special elements used in an SQL command. This can lead to SQL Injection and Command Li...

9.8CVSS7.4AI score0.00651EPSS
SaveExploits0References7
OSV
OSV
•added 2023/10/11 9:15 p.m.•10 views

CVE-2023-44187

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system. Th...

5.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/11 9:15 p.m.•33 views

Design/Logic Flaw

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system. Th...

1.7CVSS5.5AI score0.00169EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/11 8:37 p.m.•20 views

CVE-2023-44187 Junos OS Evolved: 'file copy' CLI command can disclose password to shell users

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system. Th...

5.9CVSS6.8AI score0.00169EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/10/11 12:00 a.m.•13 views

The vulnerability of the implementation of the SOCKS5 protocol in the command-line utility cURL allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the SOCKS5 protocol implementation in the CURL command-line utility is related to the issue of writing operations out of the buffer during the processing of hostname length. Exploiting this vulnerability allows a remote attacker to cause service failures or execute arbitrary...

7.6CVSS7.9AI score0.78483EPSS
SaveExploits6References19Affected Software9
CNVD
CNVD
•added 2023/10/11 12:00 a.m.•93 views

cURL SOCKS5 Heap Overflow Vulnerability

cURL is a network data transfer project. Usually when we say cURL, we mean the cURL command line tool. cURL's underlying use is the libcurl library. A heap overflow vulnerability exists in cURL SOCKS5, which can be exploited by an attacker to construct a malicious hostname and cause code executio...

9.8CVSS7.6AI score0.78483EPSS
SaveExploits6References1
CNNVD
CNNVD
•added 2023/10/11 12:00 a.m.•13 views

Juniper Networks Junos OS Evolved Information Disclosure Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to view passwords provided on the CLI command line...

5.9CVSS6.9AI score0.00169EPSS
SaveExploits0References3
OSV
OSV
•added 2023/10/10 5:15 p.m.•17 views

CVE-2023-41838

An improper neutralization of special elements used in an os command 'os command injection' in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker to execute unauthorized code or commands via FortiManager cli...

7.1CVSS5.9AI score0.00508EPSS
SaveExploits0References1
Rows per page
Query Builder