Lucene search
+L

21015 matches found

attackerkb
attackerkb
•added 2022/05/25 4:15 p.m.•14 views

CVE-2022-28875

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered remotely by an attacker...

6.5CVSS6.5AI score0.0055EPSS
SaveExploits0References3
NVD
NVD
•added 2022/05/25 4:15 p.m.•38 views

CVE-2022-28875

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered remotely by an attacker...

6.5CVSS0.0055EPSS
SaveExploits0References2
Prion
Prion
•added 2022/05/25 4:15 p.m.•30 views

Denial of service

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered remotely by an attacker...

4.3CVSS6.4AI score0.0055EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/05/25 3:09 p.m.•46 views

CVE-2022-28875 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered remotely by an attacker...

4.3CVSS6.7AI score0.0055EPSS
SaveExploits0References2
CVE
CVE
•added 2022/05/25 3:09 p.m.•115 views

CVE-2022-28875

The CVE-2022-28875 entry describes a DoS flaw in F-Secure Atlant and certain WithSecure products where scanning the aemobile component crashes the scanning engine. The vulnerability can be triggered remotely by an attacker, indicating remote attack practicality. The connected records consistently...

6.5CVSS5.4AI score0.0055EPSS
SaveExploits0References2Affected Software5
Positive Technologies
Positive Technologies
•added 2022/05/25 12:00 a.m.•7 views

PT-2022-19279

Name of the Vulnerable Software and Affected Versions F-Secure Atlant affected versions not specified WithSecure products affected versions not specified Description A Denial-of-Service DoS issue was found, where scanning the aemobile component can cause the scanning engine to crash. This can be...

6.5CVSS0.0055EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/05/25 12:00 a.m.•23 views

F-secure Atlant 安全漏洞

F-secure Atlant is a platform from the Finnish company F-secure for building applications that can scan and detect malicious files. a denial-of-service vulnerability exists in F-Secure Atlant, which can be exploited by attackers to crash the scanning engine by scanning the aemobile component...

6.5CVSS5.6AI score0.0055EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/05/25 12:00 a.m.•54 views

F-secure Atlant Denial of Service Vulnerability (CNVD-2022-77489)

F-secure Atlant is a platform from Finland's F-secure to build applications that can scan and detect malicious files.A denial-of-service vulnerability exists in F-Secure Atlant that could be exploited by an attacker to cause memory corruption and a heap buffer overflow, which could eventually lea...

5CVSS2.8AI score0.0062EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/25 12:00 a.m.•10 views

CVE-2022-28875: Improper Resource Shutdown or Release

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered remotely by an attacker...

6.5CVSS6.5AI score0.0055EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•11 views

PT-2022-20129

Name of the Vulnerable Software and Affected Versions Water-billing-management-system version 1.0 Description The issue is related to Cross Site Scripting XSS that can be exploited via the /wbms/classes/Users.php API endpoint, specifically when the firstname variable is used with the f=save...

5.4CVSS0.00503EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/24 12:00 a.m.•10 views

CVE-2022-30460: Improper Neutralization of Input During Web Page Generation

Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting XSS via /sns/classes/Users.php?f=save, firstname...

5.4CVSS6AI score0.00503EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•8 views

PT-2022-20125

Name of the Vulnerable Software and Affected Versions Automotive Shop Management System version 1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the API endpoint "/asms/classes/Master.php?f=save product" using the name variable. Recommendations...

5.4CVSS0.00503EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•6 views

PT-2022-20127

Name of the Vulnerable Software and Affected Versions Simple Social Networking Site version 1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the API endpoint "/sns/classes/Users.php?f=save" by manipulating the firstname variable. This allows an...

5.4CVSS0.00503EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•4 views

PT-2022-20353

Name of the Vulnerable Software and Affected Versions Room-rent-portal-site version 1.0 Description The issue is related to Cross Site Scripting XSS via the API endpoint "/rrps/classes/Master.php" with parameters f set to "save category" and vehicle name. This allows for potential malicious scrip...

6.1CVSS0.00641EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•5 views

PT-2022-20128

Name of the Vulnerable Software and Affected Versions Water-billing-management-system version 1.0 Description The issue concerns SQL Injection via the "/wbms/classes/Master.php?f=delete client" API endpoint, specifically affecting the id variable. This allows for potential manipulation of databas...

9.8CVSS0.01096EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•7 views

PT-2022-20355

Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The issue is related to Cross Site Scripting XSS in the Covid-19 Travel Pass Management System. The vulnerability can be exploited via the /ctpms/classes/Users.php?f=save API...

5.4CVSS0.00503EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•7 views

PT-2022-20352

Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The Covid-19 Travel Pass Management System is affected by a SQL Injection issue. This issue can be exploited via the /ctpms/classes/Master.php?f=update application status API...

9.8CVSS0.01096EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•7 views

PT-2022-20123

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue is related to Cross Site Scripting XSS via the "/bcms/classes/Master.php?f=save court rental" API endpoint. This allows for potential malicious script injection. No informati...

5.4CVSS0.00503EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/24 12:00 a.m.•11 views

CVE-2022-30463: Improper Neutralization of Special Elements used in an SQL Command

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deleteproduct...

8.8CVSS7.9AI score0.00985EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/24 12:00 a.m.•12 views

CVE-2022-30842: Improper Neutralization of Input During Web Page Generation

Covid-19 Travel Pass Management System v1.0 is vulnerable to Cross Site Scripting XSS via /ctpms/classes/Users.php?f=save, firstname...

5.4CVSS6AI score0.00503EPSS
SaveExploits1References2
Rows per page
Query Builder