Lucene search
K

682 matches found

Github Security Blog
Github Security Blog
added 2023/11/30 9:30 a.m.23 views

Microweber file upload vulnerability

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

8.8CVSS8AI score0.26275EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2023/11/30 7:15 a.m.8 views

CVE-2023-49052

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

8.8CVSS0.26275EPSS
Exploits1References2
Prion
Prion
added 2023/11/30 7:15 a.m.17 views

Unrestricted file upload

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

6.8CVSS8AI score0.26275EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2023/11/30 5:15 a.m.8 views

CVE-2023-47463

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the glnassys authentication function...

9.8CVSS0.04462EPSS
Exploits0References1
Prion
Prion
added 2023/11/30 5:15 a.m.16 views

Authentication flaw

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the glnassys authentication function...

7.5CVSS8.3AI score0.04462EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/30 12:0 a.m.13 views

CVE-2023-49052

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

9AI score0.26275EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/11/30 12:0 a.m.11 views

CVE-2023-47463

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the glnassys authentication function...

8.2AI score0.04462EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/11/30 12:0 a.m.10 views

CVE-2023-47463

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the glnassys authentication function...

9.8AI score0.04462EPSS
Exploits0References1
NVD
NVD
added 2023/11/28 2:15 a.m.10 views

CVE-2023-47503

An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module...

9.8CVSS0.01289EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/11/28 12:0 a.m.2 views

jfinalCMS Security Vulnerabilities

JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in jfinalCMS version v.5.1.0, which originated from a vulnerability that allows remote attackers to execute arbitrary code via a crafted script...

9.8CVSS7.7AI score0.01289EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/11/28 12:0 a.m.12 views

CVE-2023-47503

An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module...

9.8AI score0.01289EPSS
Exploits1References1
NVD
NVD
added 2023/11/27 11:15 p.m.6 views

CVE-2023-48188

SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a crafted script to the getModuleTranslation function...

9.8CVSS0.00691EPSS
Exploits1References1
Prion
Prion
added 2023/11/27 9:15 p.m.16 views

Sql injection

SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted script to the web/user.php component...

5CVSS7.8AI score0.00065EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/11/27 12:0 a.m.12 views

CVE-2023-48188

SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a crafted script to the getModuleTranslation function...

9.8CVSS9.9AI score0.00691EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/11/27 12:0 a.m.26 views

CVE-2023-49030

SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted script to the web/user.php component...

7.8AI score0.00065EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2023/11/21 3:46 p.m.4 views

python-gevent: privilege escalation via a crafted script to the WSGIServer component

A flaw was found in python-event, which could allow a remote attacker to gain elevated privileges on the system, caused by a flaw in the WSGIServer component. By using a specially crafted script, an attacker can gain elevated privileges...

9.8CVSS7.2AI score0.03974EPSS
Exploits1References5
NVD
NVD
added 2023/11/20 8:15 p.m.8 views

CVE-2023-46990

Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function...

9.8CVSS0.01323EPSS
Exploits1References1
Prion
Prion
added 2023/11/20 8:15 p.m.12 views

Deserialization of untrusted data

Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function...

7.5CVSS8.1AI score0.01323EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/11/20 12:0 a.m.11 views

CVE-2023-46990

Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function...

9.7AI score0.01323EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/11/18 12:0 a.m.3 views

LimeSurvey Security Breach

LimeSurvey formerly known as PHPSurveyor is an open source online questionnaire program from the Limesurvey team that supports survey program development, survey posting, and data collection. A security vulnerability exists in versions prior to LimeSurvey 6.2.9-230925. An attacker exploited the...

5.4CVSS6.9AI score0.00055EPSS
Exploits1References4
Rows per page
Query Builder