Lucene search
K

98 matches found

ATTACKERKB
ATTACKERKB
added 2024/06/24 1:15 p.m.3 views

CVE-2024-5862

Improper Restriction of Excessive Authentication Attempts vulnerability in Mia Technology Inc. Mia-Med Health Aplication allows Interface Manipulation. This issue affects Mia-Med Health Aplication: before 1.0.14...

7.5CVSS5.8AI score0.00455EPSS
Exploits0References3
NVD
NVD
added 2024/06/24 1:15 p.m.12 views

CVE-2024-5862

Improper Restriction of Excessive Authentication Attempts vulnerability in Mia Technology Inc. Mia-Med Health Aplication allows Interface Manipulation. This issue affects Mia-Med Health Aplication: before 1.0.14...

7.5CVSS0.00455EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/24 12:31 p.m.10 views

CVE-2024-5862 User Enumeration in Mia Technology's Mia-Med Health Aplication

Improper Restriction of Excessive Authentication Attempts vulnerability in Mia Technology Inc. Mia-Med Health Aplication allows Interface Manipulation. This issue affects Mia-Med Health Aplication: before 1.0.14...

7.5CVSS5.8AI score0.00455EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/24 12:31 p.m.17 views

CVE-2024-5862 User Enumeration in Mia Technology's Mia-Med Health Aplication

Improper Restriction of Excessive Authentication Attempts vulnerability in Mia Technology Inc. Mia-Med Health Aplication allows Interface Manipulation. This issue affects Mia-Med Health Aplication: before 1.0.14...

7.5CVSS0.00455EPSS
Exploits0References2
CVE
CVE
added 2024/06/24 12:31 p.m.44 views

CVE-2024-5862

The CVE-2024-5862 entry concerns Mia Technology Inc. Mia-Med Health Aplication, with an vulnerability described as Improper Restriction of Excessive Authentication Attempts that allows Interface Manipulation. Affected versions are Mia-Med Health Aplication before 1.0.14. The issue is corroborated...

7.5CVSS5.8AI score0.00455EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/12/01 12:0 a.m.3 views

PT-2023-31945 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 16.4.3 GitLab versions 16.5 through 16.5.3 GitLab versions 16.6 through 16.6.1 Description: An issue has been discovered in GitLab that allows a malicious actor to bypass prohibited branch checks using a specially...

7.5CVSS7.2AI score0.00546EPSS
Exploits0References13
NVD
NVD
added 2023/09/21 7:15 a.m.13 views

CVE-2023-4291

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution RCE vulnerability via manipulated parameters of the web interface without authentication. This could lead to a full compromise of the FDS101 device...

9.8CVSS9.8AI score0.01003EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/09/21 6:17 a.m.29 views

CVE-2023-4291 Frauscher FDS101 for FAdC/FAdCi remote code execution vulnerability

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution RCE vulnerability via manipulated parameters of the web interface without authentication. This could lead to a full compromise of the FDS101 device...

9.8CVSS9.9AI score0.01003EPSS
Exploits0References1
NVD
NVD
added 2023/02/15 10:15 p.m.16 views

CVE-2023-0850

A vulnerability was found in Netgear WNDR3700v2 1.0.1.14 and classified as problematic. This issue affects some unknown processing of the component Web Interface. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...

7.5CVSS4.9AI score0.01046EPSS
Exploits1References2
Prion
Prion
added 2023/02/02 9:15 a.m.13 views

Command injection

A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

8.3CVSS9.8AI score0.02917EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2023/01/09 9:15 p.m.19 views

Cross site scripting

A vulnerability was found in Control iD Gerencia Web 1.30. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Interface. The manipulation of the argument Nome leads to cross site scripting. The attack can be launched remotely. The...

3.3CVSS6AI score0.00501EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/09/08 12:30 p.m.19 views

CVE-2022-20863 Cisco Webex Meetings App Character Interface Manipulation Vulnerability

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character...

4.3CVSS5.5AI score0.00767EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/09/08 12:30 p.m.14 views

CVE-2022-20863 Cisco Webex Meetings App Character Interface Manipulation Vulnerability

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character...

4.3CVSS6.8AI score0.00767EPSS
Exploits0References1
Cisco
Cisco
added 2022/09/07 4:0 p.m.38 views

Cisco Webex Meetings App Character Interface Manipulation Vulnerability

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character...

4.3CVSS5AI score0.00767EPSS
Exploits0References1
NCSC
NCSC
added 2021/06/17 12:0 a.m.3 views

Vulnerability fixed in Cisco Email Security Appliance and Web Security Appliance

Cisco has fixed a vulnerability in the integration of Advanced Malware Protection AMP for Endpoints in Cisco Email Security Appliance and Cisco Web Security Appliance. The vulnerability involves improper validation of TLS certificates. A malicious party could, as a result, via a Man-in-the-Middle...

7.4CVSS6.8AI score0.0067EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2017/04/20 12:0 a.m.4 views

The vulnerability of Safari browser and iOS operating system allows a hacker to execute arbitrary code or perform page replacement attacks.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or replace the default browser tab by making incorrect references to...

6.8CVSS8AI score0.02853EPSS
Exploits0References4Affected Software2
Kaspersky
Kaspersky
added 2016/01/12 12:0 a.m.49 views

KLA10736 Spoofing vulnerability in Microsoft Exchange Server

Improper web requests handling was found in Microsoft Exchange Server at Outlook Web Access. By exploiting this vulnerability malicious users can spoof user interface. This vulnerability can be exploited remotely via a specially designed email with malicious link. Original advisories CVE-2016-003...

6.1CVSS6.2AI score0.07677EPSS
Exploits0References6
Kitploit
Kitploit
added 2015/11/28 10:27 p.m.19 views

REXT - Router Exploitation Toolkit

Small toolkit for easy creation and usage of various python scripts that work with embedded devices. core - contains most of toolkits basic functions databases - contains databases, like default credentials etc. interface - contains code that is being used for the creation and manipulation with...

7.5AI score
Exploits0References1
Rows per page
Query Builder