Lucene search
+L

4399 matches found

Positive Technologies
Positive Technologies
added 2023/11/13 12:00 a.m.16 views

PT-2023-27393 · Cleverwise · Cleverwise Daily Quotes

Name of the Vulnerable Software and Affected Versions: Cleverwise Daily Quotes versions 3.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application...

7.1CVSS6.8AI score0.0024EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/11/09 12:00 a.m.13 views

PT-2023-23845 · WordPress · Shortpixel Adaptive Images

Name of the Vulnerable Software and Affected Versions: ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin versions = 3.7.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

8.8CVSS8.8AI score0.00312EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/11/09 12:00 a.m.11 views

Tongda OA 2017 Security Breach

Tongda2000 is a web-based intelligent office system from China Tongda Tongda. A security vulnerability exists in Tongda OA 2017 version 11.9 and earlier versions, which stems from an incorrect operation of the parameter DELETESTR that can lead to sql injection...

9.8CVSS7.3AI score0.01032EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/11/08 3:38 p.m.8 views

mysql: InnoDB unspecified vulnerability (CPU Apr 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.4CVSS7.3AI score0.01232EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/11/08 12:00 a.m.17 views

WeBid security breach

WeBid is an open source auction site building solution. A security vulnerability exists in renlok WeBid 1.2.2 and earlier versions, which stems from an easy code injection attack via admin/categoriestrans.php...

9.8CVSS7.3AI score0.00961EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/11/08 12:00 a.m.10 views

BleachBit Code Issue Vulnerability

BleachBit is a free open source disk space cleaner, privacy manager and computer system optimizer from BleachBit Open Source. A code issue vulnerability exists in BleachBit 4.4.2 and prior versions that stems from the presence of a dynamic link library DLL hijacking vulnerability...

7.3CVSS7AI score0.00247EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/07 12:00 a.m.11 views

FMDataAPI Cross-Site Scripting Vulnerability

FMDataAPI is a class of Masayuki Nii personal developer. It is used to access FileMaker databases using the FileMaker Data API. A cross-site scripting vulnerability exists in FMDataAPI version 22 and earlier, which stems from a problem in the file FMDataAPISample.php that can lead to cross-site...

6.1CVSS5.8AI score0.00626EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/07 12:00 a.m.17 views

PT-2023-14644 · Unknown · Simple History – User Activity Log

Name of the Vulnerable Software and Affected Versions: Simple History – user activity log, audit tool versions 3.3.1 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file. This can potentially lead to security risks when handling CSV files...

8.8CVSS8.6AI score0.0083EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/11/06 12:00 a.m.17 views

PT-2023-15085 · Unknown · Kaizencoders Short Url

Name of the Vulnerable Software and Affected Versions: KaizenCoders Short URL versions 1.6.4 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

9.8CVSS9.5AI score0.00685EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/11/03 12:00 a.m.17 views

PT-2023-15051 · Armember · Armember

Name of the Vulnerable Software and Affected Versions: ARMember versions 3.4.11 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

9.8CVSS9.9AI score0.00639EPSS
SaveExploits0References7
OSV
OSV
added 2023/11/02 5:15 p.m.12 views

CVE-2023-4217

A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation...

5.3CVSS5.7AI score0.00323EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/01 12:00 a.m.11 views

MOXA NPort 6000 Series Encryption Problem Vulnerability

MOXA NPort 6000 Series is a series of device servers from China's MOXA Corporation. A security vulnerability exists in MOXA NPort 6000 Series v1.21 and earlier versions, which originates from allowing a malicious user to gain unauthorized access to web services...

7.5CVSS6.8AI score0.00313EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:31 a.m.9 views

SUSE CVE-2020-2770

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attac...

4.9CVSS6AI score0.02031EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:31 a.m.7 views

SUSE CVE-2020-2903

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Connection Handling. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.9CVSS6AI score0.02199EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:29 a.m.8 views

SUSE CVE-2020-14777

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS6.5AI score0.02365EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:29 a.m.7 views

SUSE CVE-2020-14804

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

4.9CVSS6.5AI score0.01799EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:29 a.m.7 views

SUSE CVE-2020-14814

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

4.9CVSS6.5AI score0.02321EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:29 a.m.5 views

SUSE CVE-2020-14870

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS6.5AI score0.02258EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:29 a.m.5 views

SUSE CVE-2020-14888

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS6.5AI score0.02321EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:27 a.m.6 views

SUSE CVE-2021-2002

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS6.5AI score0.02609EPSS
SaveExploits0References2
Rows per page
Query Builder