Lucene search
+L

3987 matches found

Citrix
Citrix
added 2017/01/16 12:0 a.m.13 views

PVS console showing target devices as down, even though it is possible to boot and stream to devices

PVS console showing target devices as down, even though it is possible boot and stream to devices.Event logged ID:11 Source: StreamProcess. DbAccess error: in ServerStatusSetContactInfo called from SSProtocolModule.cpp:2630. SQL DB server is up and accessible...

7.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2017/01/13 12:0 a.m.11 views

The vulnerability of the control device in the electrical energy sector, SICAM PAS, allows a intruder to access the database.

The vulnerability of the telecontrol device in the electrical energy sector of SICAM PAS is related to the use of strict password encoding. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain privileged access to the database using the TCP port 2638...

10CVSS7.7AI score0.01821EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/01/13 12:0 a.m.13 views

The vulnerability of the control device in the electrical energy sector, SICAM PAS, allows a intruder to access the database.

The vulnerability of the telecontrol device in the electric energy sector, SICAM PAS, is related to the storage of passwords in a recoverable format. Exploiting this vulnerability allows a malicious actor, who operates locally and has completed the authentication process, to restore user password...

6.8CVSS7.1AI score0.00317EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2017/01/10 12:0 a.m.6 views

My Php Dating 'path' Parameter SQL Injection Vulnerability

My Php Dating 2.0 is an online dating site system. A SQL injection vulnerability exists in the My Php Dating 'path' parameter, which can be exploited by attackers to access or modify database data...

8AI score
SaveExploits0References1
ClickHouse
ClickHouse
added 2017/01/10 12:0 a.m.31 views

CVE-2018-14670

Incorrect configuration in deb package could lead to the unauthorized use of the database. the UK’s National Cyber Security Centre NCSC...

9.8CVSS7.2AI score0.01793EPSS
SaveExploits0
zdt
zdt
added 2017/01/07 12:0 a.m.45 views

Intuit QuickBooks Desktop 2017 Credential Disclosure Vulnerability

Intuit QuickBooks Desktop 2017 suffers from an administrative credential disclosure vulnerability. + Credits: Maxim Tomashevich + Website: https://www.thegrideon.com/quickbooks-forensics.html + Details: https://www.thegrideon.com/qb-internals-2017.html Vendor: --------------------- www.intuit.com...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2017/01/06 12:0 a.m.5 views

SQL Injection Vulnerability in Haixie Zhikang Base Platform

Haixie Zhikang Basic Platform is a management system for food and beverage and pharmaceuticals. A SQL injection vulnerability exists in the Haixie Zhikang Basic Platform login, which can be exploited by attackers to obtain sensitive information from the website database...

7.6AI score
SaveExploits0
exploitpack
exploitpack
added 2016/12/28 12:0 a.m.16 views

WordPress Plugin Simply Poll 1.4.1 - SQL Injection

WordPress Plugin Simply Poll 1.4.1 - SQL Injection Exploit Title: Simply Poll 1.4.1 Plugin for WordPress ­ SQL Injection Date: 21/12/2016 Exploit Author: TAD GROUP Vendor Homepage: https://wordpress.org/plugins/simply-poll/ Software Link: https://wordpress.org/plugins/simply-poll/ Contact:...

0.1AI score
SaveExploits0
OSV
OSV
added 2016/12/26 8:59 a.m.11 views

CVE-2016-9217

A vulnerability in Cisco Intercloud Fabric for Business and Cisco Intercloud Fabric for Providers could allow an unauthenticated, remote attacker to connect to the database used by these products. More Information: CSCus99394. Known Affected Releases: 7.30ZN0.99...

8.8CVSS5.8AI score0.01267EPSS
SaveExploits0References2
NVD
NVD
added 2016/12/26 8:59 a.m.18 views

CVE-2016-9217

A vulnerability in Cisco Intercloud Fabric for Business and Cisco Intercloud Fabric for Providers could allow an unauthenticated, remote attacker to connect to the database used by these products. More Information: CSCus99394. Known Affected Releases: 7.30ZN0.99...

8.8CVSS8.7AI score0.01267EPSS
SaveExploits0References2
CNVD
CNVD
added 2016/12/26 12:0 a.m.4 views

Joomla com_blog_calendar Module SQL Injection Vulnerability

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A SQL injection vulnerability exists in the Joomla comblogcalendar module. An attacker can manipulate the modid value to execute SQL commands and re...

8.1AI score
SaveExploits0
CNVD
CNVD
added 2016/12/26 12:0 a.m.5 views

EasyNetSites 'nameDetail.php' Page SQL Injection Vulnerability

EasyNetSites is a WEB-based tool for managing organizational relationships on websites. A SQL injection vulnerability exists in the sn parameter of the nameDetail.php page of EasyNetSites, which originates from the program's failure to adequately filter user-submitted input, and can be exploited ...

8.1AI score
SaveExploits0References1
CNVD
CNVD
added 2016/12/22 12:0 a.m.7 views

Multiple Cisco Intercloud Fabric Security Bypass Vulnerabilities

Cisco Intercloud Fabric for Business and Intercloud Fabric for Providers are both products of the American company Cisco. The former is a service for managing hosting deployments and the latter is a virtual appliance for deploying and managing cloud providers. A security vulnerability exists in...

8.8CVSS6.8AI score0.01267EPSS
SaveExploits0References1
myhack58
myhack58
added 2016/12/22 12:0 a.m.244 views

Oracle Property Management Platform remote command execution and the cardholder data is decrypted vulnerability analysis-vulnerability warning-the black bar safety net

Recently, I found that in some large business hotel, the reception data management system of Oracle Opera in the presence of a plurality of security vulnerabilities. Hackers can exploit these vulnerabilities, the hotel booking App mentioning the right to get higher user usage rights; at the same...

5CVSS0.5AI score0.02389EPSS
SaveExploits0
CNVD
CNVD
added 2016/12/14 12:0 a.m.3 views

SQL Injection Vulnerability in ZZCMS 'subzs.php'

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in ZZCMS 'subzs.php'. It allows attackers to exploit the vulnerability to obtain sensitive information about the database...

7.7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2016/12/05 12:0 a.m.10 views

PT-2016-2997 · Siemens · Sicam Pas

Name of the Vulnerable Software and Affected Versions: Siemens SICAM PAS versions prior to 8.00 Description: The issue is related to a factory account with hard-coded passwords in SICAM PAS installations. This could allow attackers to gain privileged access to the database over Port 2638/TCP. The...

10CVSS9.2AI score0.01821EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2016/12/05 12:0 a.m.5 views

PT-2016-2998 · Siemens · Sicam Pas

Name of the Vulnerable Software and Affected Versions: Siemens SICAM PAS versions prior to 8.00 Description: The issue is related to storing passwords in a recoverable format. An authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing t...

7.8CVSS7.5AI score0.00317EPSS
SaveExploits0References5
CNVD
CNVD
added 2016/12/05 12:0 a.m.7 views

Multiple SQL Injection Vulnerabilities in XYCMS (PHP version) Message Boards

XYCMS, formerly known as Nanjing XYCMS Enterprise Station Building System, is a commercial website building system developed based on ASP. The designed version is divided into dynamic and static version. XYCMS PHP version message board has multiple SQL injection vulnerabilities. Through the...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2016/12/01 12:0 a.m.7 views

SIEMENS SICAM PAS Arbitrary File Access Vulnerability

SICAM PAS is an energy automation solution for the operation of substation equipment. It has open communication interfaces for power system control and control of industrial power supply equipment. An arbitrary file access vulnerability exists in SIEMENS SICAM PAS. Due to the use of hard-coded...

9.8CVSS7.3AI score0.01821EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/11/15 12:0 a.m.7 views

pycsw SQL Injection Vulnerability

pycsw is a system written in python that implements OGC CSW server functionality. It runs on all major platforms Windows, Linux, Mac OS X. Pycsw suffers from a SQL injection vulnerability, which can be exploited by an attacker to take control of the application, access or modify data, or exploit...

9.1CVSS8.1AI score0.02336EPSS
SaveExploits0References1
Rows per page
Query Builder