CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

14 matches found

OSV•added 2020/12/30 1:15 a.m.•52 views

CVE-2020-35847

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function...

9.8CVSS7.4AI score

SaveExploits0References6

NVD•added 2020/12/30 1:15 a.m.•24 views

CVE-2020-35846

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function...

9.8CVSS9.7AI score0.93292EPSS

SaveExploits11References5

OSV•added 2020/12/30 1:15 a.m.•39 views

CVE-2020-35848

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function...

9.8CVSS7.4AI score

SaveExploits0References5

Prion•added 2020/12/30 1:15 a.m.•30 views

Sql injection

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function...

7.5CVSS9.6AI score0.74591EPSS

SaveExploits5References5Affected Software1

Prion•added 2020/12/30 1:15 a.m.•27 views

Sql injection

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function...

7.5CVSS9.5AI score0.98165EPSS

SaveExploits8References6Affected Software1

Prion•added 2020/12/30 1:15 a.m.•36 views

Sql injection

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function...

7.5CVSS9.5AI score0.93292EPSS

SaveExploits11References5Affected Software1

Cvelist•added 2020/12/30 12:39 a.m.•36 views

CVE-2020-35846

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function...

9.7AI score0.93292EPSS

SaveExploits11References5

Cvelist•added 2020/12/30 12:39 a.m.•37 views

CVE-2020-35848

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function...

9.7AI score0.74591EPSS

SaveExploits5References5

Cvelist•added 2020/12/30 12:38 a.m.•51 views

CVE-2020-35847

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function...

9.7AI score0.98165EPSS

SaveExploits8References6

Rapid7 Vulnerability Database (full)•added 2020/12/30 12:00 a.m.•2 views

CVE-2020-35846: Improper Neutralization of Special Elements used in an SQL Command

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function...

9.8CVSS5.8AI score0.93292EPSS

SaveExploits11References2

attackerkb•added 2020/12/30 12:00 a.m.•54 views

CVE-2020-35847

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function. Recent assessments: h00die at May 31, 2021 12:11pm UTC reported: Similar to CVE-2020-35846, this is a noSQL injection using the vardump function to dump all memory for the password reset...

9.8CVSS1.8AI score0.98165EPSS

SaveExploits12References7

attackerkb•added 2020/12/30 12:00 a.m.•60 views

CVE-2020-35846

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function. Recent assessments: h00die at May 31, 2021 12:07pm UTC reported: noSQL injection within the /auth/requestreset API. By sending JSON.generate 'user' = '$func' = 'vardump' it causes the vardump functio...

9.8CVSS3.5AI score0.98165EPSS

SaveExploits12References6

Rapid7 Vulnerability Database (full)•added 2020/12/30 12:00 a.m.•3 views

CVE-2020-35847: Improper Neutralization of Special Elements used in an SQL Command

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function...

9.8CVSS5.8AI score0.98165EPSS

SaveExploits8References2

Rapid7 Vulnerability Database (full)•added 2020/12/30 12:00 a.m.•1 views

CVE-2020-35848: Improper Neutralization of Special Elements used in an SQL Command

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function...

9.8CVSS5.8AI score0.74591EPSS

SaveExploits5References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by