Lucene search
+L

13788 matches found

BDU FSTEC
BDU FSTEC
added 2022/07/08 12:00 a.m.17 views

The vulnerability of the QTS operating system, specifically the QuTS Hero operating system, arises from the lack of measures taken to neutralize special elements used in the command line of the operating system. This allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the QTS operating system is related to the lack of measures taken to neutralize special elements used in the OS command line. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of information...

9CVSS7.9AI score0.01635EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/08 12:00 a.m.19 views

The vulnerability of the QNAP QVR surveillance system, related to the failure to take measures to neutralize special elements used in the operating system’s command, allows intruders to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the QNAP QVR video surveillance system is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

10CVSS8AI score0.01309EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/07/07 12:15 p.m.8 views

CVE-2022-34007

EQS Integrity Line Professional through 2022-07-01 allows a stored XSS via a crafted whistleblower entry...

6.1CVSS5.8AI score0.01527EPSS
SaveExploits3References6
NVD
NVD
added 2022/07/07 12:15 p.m.33 views

CVE-2022-34007

EQS Integrity Line Professional through 2022-07-01 allows a stored XSS via a crafted whistleblower entry...

6.1CVSS0.01527EPSS
SaveExploits3References6
Prion
Prion
added 2022/07/07 12:15 p.m.13 views

Cross site scripting

EQS Integrity Line Professional through 2022-07-01 allows a stored XSS via a crafted whistleblower entry...

4.3CVSS5.9AI score0.01527EPSS
SaveExploits3References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/07 12:15 p.m.6 views

CVE-2022-34007

EQS Integrity Line Professional through 2022-07-01 allows a stored XSS via a crafted whistleblower entry...

6.1CVSS5.9AI score0.01527EPSS
SaveExploits3References7
Cvelist
Cvelist
added 2022/07/07 11:14 a.m.34 views

CVE-2022-34007

EQS Integrity Line Professional through 2022-07-01 allows a stored XSS via a crafted whistleblower entry...

6.1AI score0.01527EPSS
SaveExploits3References6
CVE
CVE
added 2022/07/07 11:14 a.m.87 views

CVE-2022-34007

CVE-2022-34007 affects EQS Integrity Line (Professional) through 2022-07-01 with a stored XSS via a crafted whistleblower entry. The root cause is a stored cross-site scripting vulnerability; exploitation details are not provided in the documents. Red Hat, CNVD, NVD and third-party advisories cor...

6.1CVSS5.9AI score0.01527EPSS
SaveExploits3References6Affected Software1
OSV
OSV
added 2022/07/07 8:29 a.m.11 views

CLSA-2022-1657182572 Fixed CVEs in vim: CVE-2022-2124, CVE-2022-2129, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720

CVE-2022-2125: add checking for NUL to avoid running over the end of line - CVE-2022-1720: do not include the NUL in the length to avoid reading past end of line with "gf" in Visual block mode - CVE-2022-2124: add checking for NUL to avoid running over the end of line - CVE-2022-2129: disallow...

7.8CVSS6.9AI score0.02185EPSS
SaveExploits5References1
OSV
OSV
added 2022/07/07 8:26 a.m.9 views

CLSA-2022-1657182377 Fixed CVEs in vim: CVE-2022-2129, CVE-2022-2125, CVE-2022-1720, CVE-2022-2124, CVE-2022-2126

CVE-2022-2125: add checking for NUL to avoid running over the end of line - CVE-2022-1720: do not include the NUL in the length to avoid reading past end of line with "gf" in Visual block mode - CVE-2022-2124: add checking for NUL to avoid running over the end of line - CVE-2022-2129: disallow...

7.8CVSS6.9AI score0.02185EPSS
SaveExploits5References1
OSV
OSV
added 2022/07/07 8:22 a.m.15 views

CLSA-2022-1657182150 Fix CVE(s): CVE-2022-2129, CVE-2022-2124, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720

SECURITY UPDATE: Reading past end of line with "gf" in Visual block mode - debian/patches/CVE-2022-1720.patch: Do not include the NUL in the length - CVE-2022-1720 SECURITY UPDATE: Searching for quotes may go over the end of the line - debian/patches/CVE-2022-2124.patch: Check for running into th...

7.8CVSS7.3AI score0.02185EPSS
SaveExploits5References1
Positive Technologies
Positive Technologies
added 2022/07/07 12:00 a.m.7 views

PT-2022-21963 · Eqs · Eqs Integrity Line

Name of the Vulnerable Software and Affected Versions: EQS Integrity Line through 2022-07-01 Description: The issue allows a stored XSS via a crafted whistleblower entry. Recommendations: For EQS Integrity Line through 2022-07-01, consider restricting access to the whistleblower entry feature unt...

6.1CVSS5.9AI score0.01527EPSS
SaveExploits3References11
zdt
zdt
added 2022/07/07 12:00 a.m.426 views

EQS Integrity Line Cross Site Scripting / Information Disclosure Vulnerabilities

EQS Integrity Line: Multiple Vulnerabilities Name Multiple Vulnerabilities in EQS Integrity Line Systems Affected EQS Integrity Line through 2022-07-01 Severity High Impact CVSSv2 High 8.8/10, score: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Vendor EQS Group AG https://www.eqs.com/ Advisory...

6.1CVSS6.4AI score0.01527EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2022/07/06 12:00 a.m.17 views

Fedora: Security Advisory for grpcurl (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:00 a.m.15 views

The vulnerability of the QTS operating system lies in its inability to neutralize special elements used in the OS command line, allowing attackers to execute arbitrary commands.

The vulnerability of the QTS operating system is related to the lack of measures taken to neutralize special elements used in the OS commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9.8CVSS8.1AI score0.24449EPSS
SaveExploits0References3Affected Software1
Packet Storm
Packet Storm
added 2022/07/06 12:00 a.m.357 views

EQS Integrity Line Cross Site Scripting / Information Disclosure

EQS Integrity Line: Multiple Vulnerabilities Name Multiple Vulnerabilities in EQS Integrity Line Systems Affected EQS Integrity Line through 2022-07-01 Severity High Impact CVSSv2 High 8.8/10, score: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Vendor EQS Group AG https://www.eqs.com/ Advisory...

6.4AI score0.01527EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2022/07/06 12:00 a.m.28 views

Fedora: Security Advisory for weldr-client (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2022/07/06 12:00 a.m.15 views

Fedora: Security Advisory for xq (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
CNNVD
CNNVD
added 2022/07/06 12:00 a.m.12 views

EQS Integrity Line 跨站脚本漏洞

EQS Integrity Line is a secure and anonymous reporting software from EQS Germany. EQS Integrity Line suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute JavaScript code on the client side...

6.1CVSS5.6AI score0.01527EPSS
SaveExploits3References10
RedHat Linux
RedHat Linux
added 2022/07/05 2:41 p.m.9 views

rubygem-puma: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma

An HTTP Request Smuggling vulnerability was found in puma. When using puma with a proxy, which forwards LF characters as line endings, an attacker could use this flaw to smuggle a request through a proxy, causing the proxy to send a response back to another unknown client...

3.7CVSS7.1AI score0.01203EPSS
SaveExploits0References5
Rows per page
Query Builder