Lucene search
+L

953 matches found

CNNVD
CNNVD
added 2022/02/11 12:0 a.m.13 views

Acronis VSS Doctor 代码问题漏洞

Acronis VSS Doctor is a diagnostic and repair tool from Acronis Singapore. It is available free of charge to help you quickly identify and effectively repair the most common Volume Shadow Copy Service problems. A security vulnerability exists in versions prior to Acronis VSS Doctor build 53 that...

7.8CVSS7.3AI score0.00197EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/21 11:15 p.m.4 views

CVE-2022-23365

HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...

9.8CVSS7.3AI score
SaveExploits0References1
Cvelist
Cvelist
added 2021/12/20 3:10 a.m.52 views

CVE-2021-44159 4MOSAn GCB Doctor - Unrestricted Upload of File

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack...

9.8CVSS10AI score0.03409EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/20 3:10 a.m.63 views

CVE-2021-44159

CVE-2021-44159 concerns 4MOSAn GCB Doctor’s file upload function, where improper user privilege control allows an unauthenticated remote attacker to upload arbitrary files (including webshells) and potentially execute code, enabling arbitrary system operations or a denial of service. The vulnerab...

10CVSS9.9AI score0.03409EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/12/20 12:0 a.m.9 views

4MOSAn GCB Doctor 代码问题漏洞

Radiant Tech 4Mosan Gcb Doctor Government Common Configuration Setup and Detection is Radiant Tech's pipeline for effectively controlling hacking of personal computers and reducing security incidents. A code issue vulnerability exists in 4MOSAn GCB Doctor, which stems from the product's failure t...

10CVSS8.9AI score0.03409EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/17 8:35 a.m.4 views

CVE-2021-44159

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack...

10CVSS7.7AI score0.03409EPSS
SaveExploits0References2
ThreatPost
ThreatPost
added 2021/11/24 5:28 p.m.126 views

9.3M+ Androids Running ‘Malicious’ Games from Huawei AppGallery

Why would a game about a cat’s “cute diary” need permission to make phone calls or suss out your location? It doesn’t: “Cat cute diary” is one of 190 trojanized games that Doctor Web malware analysts have found on AppGallery, the official app store for Huawei Android. They’re littering the Androi...

6.9AI score
SaveExploits0References10
The Hacker News
The Hacker News
added 2021/11/24 7:40 a.m.25 views

Over 9 Million Android Phones Running Malware Apps from Huawei's AppGallery

At least 9.3 million Android devices have been infected by a new class of malware that disguises itself as dozens of arcade, shooter, and strategy games on Huawei's AppGallery marketplace to steal device information and victims' mobile phone numbers. The mobile campaign was disclosed by researche...

6.7AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2021/11/23 5:59 p.m.49 views

Cross-site Scripting in kimai2

Cross site request forgery vulnerability is present in delete functionality of doctor feature. This vulnerability is capable of deleting system logs...

4.6CVSS5.2AI score0.00371EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2021/11/19 9:5 a.m.37 views

CVE-2021-42338 4MOSAn GCB Doctor - Improper Authorization

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files...

9.8CVSS10AI score0.05628EPSS
SaveExploits0References1
Huntr
Huntr
added 2021/11/08 7:29 p.m.19 views

Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2

Description cross site request forgery vulnerability is present in delete functionality of doctor feature. Proof of Concept history.pushState'', '', '/' document.forms0.submit; Impact This vulnerability is capable of delete the existing logs...

4.3CVSS2.1AI score0.00371EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/11/05 2:32 p.m.26 views

CVE-2021-39411

Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the 1 searchdata parameter in a doctor/search.php and b admin/patient-search.php, and the 2 fromdate and 3 todate parameters in admin/betweendates-detailsreports.php...

6.3AI score0.0089EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/11/05 12:0 a.m.8 views

PT-2021-22580 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: Multiple Cross Site Scripting XSS vulnerabilities exist in the system. The issue is related to the searchdata parameter in "/doctor/search.php" and "/admin/patient-search.php" API...

6.1CVSS6.1AI score0.0089EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/11/05 12:0 a.m.7 views

PHPGurukul Hospital Management System 跨站脚本漏洞

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. PHPGurukul Hospital Management System 4.0 has a security vulnerability that can be exploited by an attacker to conduct xss attacks using multiple parameters. The parameters that can be exploited are 1...

6.1CVSS6.3AI score0.0089EPSS
SaveExploits0References2
NVD
NVD
added 2021/11/03 8:15 p.m.27 views

CVE-2020-6931

HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege...

7.8CVSS0.00276EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/03 8:15 p.m.8 views

CVE-2020-6931

HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege...

7.8CVSS5.8AI score0.00276EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/03 8:15 p.m.14 views

Privilege escalation

HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege...

4.6CVSS7.5AI score0.00276EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/11/03 7:7 p.m.39 views

CVE-2020-6931

CVE-2020-6931 concerns the HP Print and Scan Doctor utility. The connected sources identify a local elevation of privilege as the component impact, affecting HP’s Windows tool (HP Print and Scan Doctor). The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE listings) with a hig...

7.8CVSS7.5AI score0.00276EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/03 7:7 p.m.37 views

CVE-2020-6931

HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege...

7.6AI score0.00276EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/11/03 12:0 a.m.6 views

HP Print and Scan Doctor 安全漏洞

HP Print and Scan Doctor is a free tool for Windows from Hewlett-Packard HP that helps solve printing and scanning problems. A security vulnerability exists in HP Print and Scan Doctor, which stems from problems with the software's management of privileges and may be susceptible to potential...

7.8CVSS7.3AI score0.00276EPSS
SaveExploits0References2
Rows per page
Query Builder