Lucene search
+L

2366 matches found

Zero Science Lab
Zero Science Lab
•added 2023/10/19 12:00 a.m.•400 views

VIMESA VHF/FM Transmitter Blue Plus 9.7.1 (doreboot) Remote Denial Of Service

Summary The transmitter Blue Plus is designed with all the latest technologies, such as high efficiency using the latest generation LDMOS transistor and high efficiency power supplies. We used a modern interface and performance using a color display with touch screen, with easy management softwar...

6.9CVSS5.8AI score0.00393EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2023/10/17 12:00 a.m.•19 views

Fortinet FortiWLM Command Injection Code Execution

The vulnerability of Fortinet FortiWLM’s WLAN access point and LAN switch management systems exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a...

9CVSS8AI score0.02486EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2023/10/14 11:15 a.m.•24 views

CVE-2023-5578

A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agendaimprimir.php of the component HTTP GET Request Handler. The manipulation of the argument codagenda with the input ";' alertdocument.cookie results in cross site scripting...

5.4CVSS4.2AI score0.00496EPSS
SaveExploits0References8
Prion
Prion
•added 2023/10/14 11:15 a.m.•27 views

Cross site scripting

A vulnerability was found in Portábilis i-Educar up to 2.7.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file \intranet\agendaimprimir.php of the component HTTP GET Request Handler. The manipulation of the argument codagenda with the inp...

4CVSS5.2AI score0.00496EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2023/10/14 10:31 a.m.•32 views

CVE-2023-5578 Portábilis i-Educar HTTP GET Request agenda_imprimir.php cross site scripting

A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agendaimprimir.php of the component HTTP GET Request Handler. The manipulation of the argument codagenda with the input ";' alertdocument.cookie results in cross site scripting...

5.1CVSS3.8AI score
SaveExploits0References10
Cvelist
Cvelist
•added 2023/10/14 10:31 a.m.•38 views

CVE-2023-5578 Portábilis i-Educar HTTP GET Request agenda_imprimir.php cross site scripting

A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agendaimprimir.php of the component HTTP GET Request Handler. The manipulation of the argument codagenda with the input ";' alertdocument.cookie results in cross site scripting...

5.1CVSS5.4AI score0.00496EPSS
SaveExploits0References6
Mend
Mend
•added 2023/10/14 10:31 a.m.•7 views

CVE-2023-5578

A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agendaimprimir.php of the component HTTP GET Request Handler. The manipulation of the argument codagenda with the input ";' alertdocument.cookie results in cross site scripting...

5.4CVSS0.00496EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/14 12:00 a.m.•4 views

CVE-2023-5578: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agendaimprimir.php of the component HTTP GET Request Handler. The manipulation of the argument codagenda with the input ";' results in cross site scripting. The attack can be...

5.4CVSS3.6AI score0.00496EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/10/14 12:00 a.m.•5 views

PT-2023-32190

Name of the Vulnerable Software and Affected Versions Portábilis i-Educar versions up to 2.7.5 Description A vulnerability was found in the HTTP GET Request Handler component, specifically in the file intranetagenda imprimir.php. The manipulation of the cod agenda argument with malicious input...

5.4CVSS4.7AI score0.00496EPSS
SaveExploits0References13
osv_cve
osv_cve
•added 2023/10/10 5:15 p.m.•24 views

CVE-2023-36550

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...

9.8CVSS5.9AI score0.02486EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/10 5:15 p.m.•19 views

CVE-2023-36547

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...

9.8CVSS5.9AI score0.02486EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/10 5:15 p.m.•37 views

CVE-2023-34985

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters...

8.8CVSS9AI score0.02486EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/10 5:15 p.m.•39 views

CVE-2023-34988

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters...

8.8CVSS9AI score0.02486EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/10 5:15 p.m.•38 views

CVE-2023-36548

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...

9.8CVSS9.8AI score0.02486EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/10 5:15 p.m.•35 views

CVE-2023-34988

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters...

8.8CVSS5.9AI score0.02486EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/10 5:15 p.m.•18 views

CVE-2023-34993

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...

9.8CVSS5.9AI score0.21321EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/10 5:15 p.m.•37 views

Command injection

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...

7.5CVSS9.6AI score0.02486EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/10/10 5:15 p.m.•36 views

Command injection

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters...

6.5CVSS8.9AI score0.02486EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/10/10 5:15 p.m.•29 views

Command injection

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters...

6.5CVSS8.9AI score0.02486EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/10/10 5:15 p.m.•30 views

Command injection

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...

7.5CVSS9.6AI score0.02487EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder