Lucene search
+L

4388 matches found

Positive Technologies
Positive Technologies
•added 2024/01/12 12:00 a.m.•4 views

PT-2024-15580

Name of the Vulnerable Software and Affected Versions code-projects Online Faculty Clearance version 1.0 Description A critical issue affects some unknown functionality of the file /production/admin view info.php of the component HTTP POST Request Handler. The manipulation of the argument haydi...

9.8CVSS5.5AI score0.005EPSS
SaveExploits0References8
OSV
OSV
•added 2024/01/11 7:15 p.m.•17 views

CVE-2024-0419

A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic. This issue affects some unknown processing of the component HTTP POST Request Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the...

7.5CVSS4.9AI score0.01142EPSS
SaveExploits1References4
Prion
Prion
•added 2024/01/11 7:15 p.m.•38 views

Design/Logic Flaw

A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic. This issue affects some unknown processing of the component HTTP POST Request Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the...

5CVSS7.1AI score0.01142EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/01/11 6:31 p.m.•48 views

CVE-2024-0419 Jasper httpdx HTTP POST Request denial of service

A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic. This issue affects some unknown processing of the component HTTP POST Request Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the...

5.3CVSS7.8AI score0.01142EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/01/11 6:31 p.m.•19 views

CVE-2024-0419 Jasper httpdx HTTP POST Request denial of service

A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic. This issue affects some unknown processing of the component HTTP POST Request Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the...

5.3CVSS6.9AI score0.01142EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/01/11 12:00 a.m.•5 views

PT-2024-15542

Name of the Vulnerable Software and Affected Versions Jasper httpdx versions up to 1.5.4 Description A vulnerability was found in the HTTP POST Request Handler component of Jasper httpdx, which can be exploited to cause a denial of service. The attack may be initiated remotely. Recommendations Fo...

7.5CVSS5.5AI score0.01142EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/11 12:00 a.m.•4 views

CVE-2024-0419: Improper Resource Shutdown or Release

A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic. This issue affects some unknown processing of the component HTTP POST Request Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the...

7.5CVSS5.6AI score0.01142EPSS
SaveExploits1References2
NVD
NVD
•added 2024/01/10 1:15 a.m.•31 views

CVE-2024-0357

A vulnerability was found in coderd-repos Eva 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /system/traceLog/page of the component HTTP POST Request Handler. The manipulation of the argument property leads to sql injection. The exploit has been...

9.8CVSS6.9AI score0.00651EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/10 1:15 a.m.•38 views

Sql injection

A vulnerability was found in coderd-repos Eva 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /system/traceLog/page of the component HTTP POST Request Handler. The manipulation of the argument property leads to sql injection. The exploit has been...

5.2CVSS7.7AI score0.00651EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/10 12:31 a.m.•8 views

CVE-2024-0357 coderd-repos Eva HTTP POST Request page sql injection

A vulnerability was found in coderd-repos Eva 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /system/traceLog/page of the component HTTP POST Request Handler. The manipulation of the argument property leads to sql injection. The exploit has been...

5.5CVSS7.8AI score0.00651EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/01/10 12:31 a.m.•42 views

CVE-2024-0357 coderd-repos Eva HTTP POST Request page sql injection

A vulnerability was found in coderd-repos Eva 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /system/traceLog/page of the component HTTP POST Request Handler. The manipulation of the argument property leads to sql injection. The exploit has been...

5.5CVSS9.9AI score0.00651EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/10 12:31 a.m.•74 views

CVE-2024-0357

CVE-2024-0357 affects Eva 1.0.0 (coderd-repos). The vulnerability lies in the HTTP POST Request Handler for /system/traceLog/page, where manipulation of an argument property enables SQL injection. Multiple sources (NVD, Red Hat, CVE lists, vulnerability databases) classify the issue as critical w...

9.8CVSS9.6AI score0.00651EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•6 views

CVE-2024-0357: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in coderd-repos Eva 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /system/traceLog/page of the component HTTP POST Request Handler. The manipulation of the argument property leads to sql injection. The exploit has been...

9.8CVSS6.1AI score0.00651EPSS
SaveExploits1References2
NVD
NVD
•added 2024/01/09 11:15 p.m.•37 views

CVE-2024-0352

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to...

9.8CVSS8.7AI score0.72917EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/09 11:15 p.m.•31 views

Out-of-bounds

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to...

7.5CVSS7.3AI score0.72917EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/01/09 11:00 p.m.•54 views

CVE-2024-0352 Likeshop HTTP POST Request File.php userFormImage unrestricted upload

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to...

7.5CVSS9.8AI score0.72917EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/01/09 11:00 p.m.•10 views

CVE-2024-0352 Likeshop HTTP POST Request File.php userFormImage unrestricted upload

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to...

7.5CVSS9.6AI score0.72917EPSS
SaveExploits1References3
Mend
Mend
•added 2024/01/09 11:00 p.m.•6 views

CVE-2024-0352

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to...

9.8CVSS0.72917EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/09 11:00 p.m.•124 views

CVE-2024-0352

CVE-2024-0352 affects Likeshop up to 2.5.7.20210311. The vulnerability is in FileServer::userFormImage (file server/application/api/controller/File.php) where manipulating the file argument leads to unrestricted file upload. Impact scope includes remote execution potential with impact to confiden...

9.8CVSS9.5AI score0.72917EPSS
SaveIn wildExploits1References3Affected Software1
NVD
NVD
•added 2024/01/09 4:15 p.m.•41 views

CVE-2023-7222

A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of the file /bin/boa of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The atta...

9.8CVSS7.8AI score0.0132EPSS
SaveExploits1References3
Rows per page
Query Builder