Lucene search
+L

691 matches found

NVD
NVD
added 2023/12/07 7:15 a.m.26 views

CVE-2023-48830

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

8.8CVSS0.01201EPSS
SaveExploits2References2
OSV
OSV
added 2023/12/07 7:15 a.m.7 views

CVE-2023-48830

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

8.8CVSS5.8AI score0.01201EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2023/12/07 7:15 a.m.5 views

CVE-2023-48830

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

8.8CVSS7.3AI score0.01201EPSS
SaveExploits2References3
Prion
Prion
added 2023/12/07 7:15 a.m.19 views

Input validation

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

6.5CVSS7.4AI score0.01201EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2023/12/07 12:0 a.m.44 views

CVE-2023-48830

Shuttle Booking Software 2.0 is affected by CVE-2023-48830 due to CSV injection in the Languages section during export. The root cause is insufficient input validation on the Unique ID field in the Reservations list used to construct CSV exports. Impact is exposure of injected content in exported...

8.8CVSS8.7AI score0.01201EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2023/12/07 12:0 a.m.34 views

CVE-2023-48830

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

9AI score0.01201EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/12/07 12:0 a.m.8 views

Shuttle Booking Software Security Breach

Shuttle Booking Software is a PHP Jabbers open source shuttle booking software. A security vulnerability exists in Shuttle Booking Software version 2.0, which stems from a CSV injection vulnerability in the Languages selection function when exporting...

8.8CVSS8.8AI score0.01201EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2023/12/06 12:0 a.m.9 views

PT-2023-30974 · Unknown · Shuttle Booking

Name of the Vulnerable Software and Affected Versions: Shuttle Booking Software version 2.0 Description: The issue concerns a CSV Injection vulnerability in the Languages section of the software, which can be exploited via an export. Recommendations: For Shuttle Booking Software version 2.0,...

8.8CVSS8.7AI score0.01201EPSS
SaveExploits2References4
Wallarm Lab
Wallarm Lab
added 2023/11/15 8:25 p.m.19 views

What Is Microservices Architecture

Mastering the Essential Elements of Services-Focused Programming The methodology of programming using tiny, interdependent software units, often simplified to 'Microservices', has seen a marked uptick in usage in recent times. This distinct architectural paradigm shapes an application as a group ...

7.9AI score
SaveExploits0
Fedora
Fedora
added 2023/11/09 1:22 a.m.28 views

[SECURITY] Fedora 39 Update: libnbd-1.18.1-2.fc39

NBD =EF=BF=BD=EF=BF=BD=EF=BF=BD Network Block Device =EF=BF=BD=EF=BF=BD=EF=BF =BD is a protocol for accessing Block Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and...

5.3CVSS5.4AI score0.00922EPSS
SaveExploits0
Fedora
Fedora
added 2023/11/03 6:54 p.m.20 views

[SECURITY] Fedora 39 Update: llvm-17.0.2-1.fc39

LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages. The compiler infrastructure includes mirror sets of programming tools as well as libraries with equivalent functionality...

5.5CVSS7.4AI score0.00215EPSS
SaveExploits0
Fedora
Fedora
added 2023/10/24 1:23 a.m.62 views

[SECURITY] Fedora 38 Update: fbthrift-2023.10.16.00-1.fc38

Thrift is a serialization and RPC framework for service communication. Thrift enables these features in all major languages, and there is strong support for C++, Python, Hack, and Java. Most services at Facebook are written using Thri ft for RPC, and some storage systems use Thrift for serializin...

7.5CVSS8.7AI score0.99999EPSS
SaveExploits20
Fedora
Fedora
added 2023/10/24 1:13 a.m.51 views

[SECURITY] Fedora 37 Update: fbthrift-2023.10.16.00-1.fc37

Thrift is a serialization and RPC framework for service communication. Thrift enables these features in all major languages, and there is strong support for C++, Python, Hack, and Java. Most services at Facebook are written using Thri ft for RPC, and some storage systems use Thrift for serializin...

7.5CVSS8.7AI score0.99999EPSS
SaveExploits20
OSV
OSV
added 2023/10/23 1:33 p.m.14 views

SUSE-SU-2023:4162-1 Security update for gcc13

This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers for C, C++, and Fortran are provided...

4.8CVSS5.4AI score0.00758EPSS
SaveExploits1References10
ATTACKERKB
ATTACKERKB
added 2023/10/20 11:15 p.m.7 views

CVE-2023-43346

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard parameter in the Languages Menu component...

5.4CVSS6.1AI score0.00485EPSS
SaveExploits1References3
Prion
Prion
added 2023/10/20 11:15 p.m.21 views

Cross site scripting

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard parameter in the Languages Menu component...

4.9CVSS5.5AI score0.00485EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2023/10/20 12:0 a.m.48 views

CVE-2023-43346

The CVE-2023-43346 issue affects opensolution Quick CMS v6.7. A cross-site scripting (XSS) flaw in the Languages Menu component allows a local attacker to execute arbitrary code through a crafted script sent to the Backend - Dashboard parameter. Documents consistently describe this as a local XSS...

5.4CVSS5.5AI score0.00485EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/10/20 12:0 a.m.30 views

CVE-2023-43346

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard parameter in the Languages Menu component...

5.7AI score0.00485EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/10/19 10:15 p.m.5 views

CVE-2023-43342

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component...

5.4CVSS6.1AI score0.00486EPSS
SaveExploits1References3
OSV
OSV
added 2023/10/19 10:15 p.m.5 views

CVE-2023-43342

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component...

5.4CVSS6.1AI score0.00486EPSS
SaveExploits1References2
Rows per page
Query Builder