Lucene search
+L

147 matches found

NVD
NVD
•added 2024/05/07 11:15 p.m.•35 views

CVE-2021-35001

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS3.2AI score0.00757EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/07 10:54 p.m.•47 views

CVE-2021-35001 BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

3.1CVSS3.6AI score0.00757EPSS
SaveExploits0References2
CVE
CVE
•added 2024/05/07 10:54 p.m.•109 views

CVE-2021-35001

CVE-2021-35001 affects BMC Track-It! GetData endpoint. The root cause is missing authorization prior to accessing functionality, allowing remote disclosure of sensitive information (stored credentials) on affected installations. Exploitation requires authentication per descriptions, and no explic...

6.5CVSS3.4AI score0.00757EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/07 12:00 a.m.•8 views

CVE-2021-35001: Missing Authorization

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS5.9AI score0.00757EPSS
SaveExploits0References1
OSV
OSV
•added 2024/01/08 7:15 a.m.•15 views

CVE-2024-0301

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS5.6AI score0.00706EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/08 7:15 a.m.•27 views

Sql injection

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS7.7AI score0.00706EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2024/01/08 6:31 a.m.•2 views

CVE-2024-0301

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS0.00706EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/01/08 6:31 a.m.•7 views

CVE-2024-0301 fhs-opensource iparking PayTempOrderAction.java getData sql injection

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS7.6AI score0.00706EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•4 views

CVE-2024-0301: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS6.5AI score0.00706EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/01/07 12:00 a.m.•4 views

PT-2024-15452

Name of the Vulnerable Software and Affected Versions fhs-opensource iparking version 1.5.22.RELEASE Description A critical vulnerability was found in the getData function of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. This issue leads to SQL injection and can be initiated...

9.8CVSS5.5AI score0.00706EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
•added 2023/02/15 5:50 a.m.•9 views

SUSE CVE-2011-3660

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors that...

10CVSS9.6AI score0.04372EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2023/02/15 4:56 a.m.•13 views

SUSE CVE-2016-8884

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690...

5.5CVSS6.7AI score0.02375EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 4:27 a.m.•8 views

SUSE CVE-2018-11531

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

5.3CVSS9.8AI score0.02914EPSS
SaveExploits1References7
OpenVAS
OpenVAS
•added 2022/02/01 12:00 a.m.•27 views

openSUSE: Security Advisory for getdata (openSUSE-SU-2021:1645-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.02099EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2022/01/06 12:00 a.m.•32 views

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetData endpoint. The issue results from the lack of authorization prior to allowi...

3.1CVSS2.1AI score0.00757EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/01/06 12:00 a.m.•31 views

PT-2022-10383 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this issue. The specific flaw...

6.5CVSS6.4AI score0.00757EPSS
SaveExploits0References4
OSV
OSV
•added 2021/12/30 5:01 p.m.•7 views

OPENSUSE-SU-2021:1645-1 Security update for getdata

getdata was updated to 0.11.0, fixing bugs and a security issue: - CVE-2021-20204: Fixed a use after free in GDSupports in encoding.c boo1186251 for all relevant changes see: https://github.com/ketiltrout/getdata/releases/tag/v0.11.0...

9.8CVSS9.6AI score0.02099EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
•added 2021/12/30 12:00 a.m.•54 views

Security update for getdata (moderate)

openSUSE Security Update: Security update for getdata Announcement ID: openSUSE-SU-2021:1645-1 Rating: moderate References: 1186251 Cross-References: CVE-2021-20204 CVSS scores: CVE-2021-20204 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20204 SUSE: 9.8...

9.8CVSS8.2AI score0.02099EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/12/04 12:00 a.m.•31 views

Fedora: Security Advisory for getdata (FEDORA-2021-e2b64c614b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.7AI score0.02099EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/12/04 12:00 a.m.•22 views

Fedora: Security Advisory for getdata (FEDORA-2021-3b8bb26909)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.7AI score0.02099EPSS
SaveExploits0References2
Rows per page
Query Builder