Lucene search
K

8 matches found

ATTACKERKB
ATTACKERKB
added 2024/02/05 10:15 p.m.2 views

CVE-2023-6983

The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.1 via the vgdisplaydata shortcode due to missing validation on a user controlled key. This makes it possible fo...

4.3CVSS5.4AI score0.00247EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/03/21 10:15 p.m.1 views

CVE-2022-26174

A remote code execution RCE vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields...

9.8CVSS6.7AI score0.02228EPSS
Exploits1References2
NVD
NVD
added 2022/03/21 10:15 p.m.12 views

CVE-2022-26174

A remote code execution RCE vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields...

9.8CVSS0.02228EPSS
Exploits1References1
OSV
OSV
added 2022/03/21 10:15 p.m.12 views

CVE-2022-26174

A remote code execution RCE vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields...

9.8CVSS8.6AI score
Exploits0References1
Prion
Prion
added 2022/03/21 10:15 p.m.11 views

Remote code execution

A remote code execution RCE vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields...

7.5CVSS9.6AI score0.02228EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/03/21 9:54 p.m.84 views

CVE-2022-26174

Beekeeper Studio 3.2.0 is affected by a remote code execution (RCE) via a crafted payload injected into display fields. Multiple connected sources corroborate the vulnerability description (RCE in Beekeeper Studio v3.2.0). The exact root cause is not fully detailed across the provided documents, ...

9.8CVSS9.7AI score0.02228EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/21 12:0 a.m.2 views

PT-2022-17707 · Unknown · Beekeeper Studio

Name of the Vulnerable Software and Affected Versions: Beekeeper Studio version 3.2.0 Description: A remote code execution issue allows attackers to execute arbitrary code via a crafted payload injected into the display fields. Recommendations: For Beekeeper Studio version 3.2.0, at the moment,...

9.8CVSS9.7AI score0.02228EPSS
Exploits1References5
Prion
Prion
added 2012/05/22 4:55 p.m.12 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Schneider Electric Kerweb before 3.0.1 and Kerwin before 6.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the evtvariablename parameter in an evts.xml action to kw.dll, 2 unspecified search fields, or 3 unspecified...

4.3CVSS6.1AI score0.00731EPSS
Exploits1References3Affected Software2
Rows per page
Query Builder