Lucene search
+L

226 matches found

NVD
NVD
•added 2025/01/07 11:15 a.m.•19 views

CVE-2024-51715

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

8.5CVSS0.00384EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/07 10:49 a.m.•35 views

CVE-2024-51715 WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

8.5CVSS0.00384EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/07 10:49 a.m.•77 views

CVE-2024-51715

CVE-2024-51715 is a SQL injection vulnerability in ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages (ClickWhale plugin for WordPress). Connected sources confirm an authenticated (Contributor+) SQL Injection impact, affecting versions up to 2.4.1 (no n/a...

8.5CVSS7.3AI score0.00384EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/07 10:49 a.m.•16 views

CVE-2024-51715 WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

8.5CVSS7.3AI score0.00384EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/10/02 12:00 a.m.•12 views

The vulnerability of the software tools for managing identification and access control, as well as the ID Link Manager and the resource planning software FUJITSU Software TIME CREATOR, allows a perpetrator to gain unauthorized access to read and modify confidential information.

The vulnerability of the software tools for managing identification and access to the ID Link Manager, as well as the resource planning software FUJITSU Software TIME CREATOR, is related to the lack of authentication checks for a critical function. Exploiting this vulnerability could allow an...

5.5CVSS7.6AI score0.00438EPSS
SaveExploits0References5Affected Software3
NVD
NVD
•added 2024/06/18 6:15 a.m.•39 views

CVE-2024-33620

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker...

8.6CVSS0.00678EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/06/18 5:44 a.m.•68 views

CVE-2024-34024

Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not...

0.00359EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/06/18 5:44 a.m.•25 views

CVE-2024-34024

Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not...

7.4AI score0.00359EPSS
SaveExploits0References2
CVE
CVE
•added 2024/06/18 5:44 a.m.•83 views

CVE-2024-34024

An information disclosure vulnerability (CWE-204) exists in ID Link Manager and FUJITSU Software TIME CREATOR products provided by Fsas Technologies Inc. Due to an observable response discrepancy , an unauthenticated remote attacker can determine whether a specific username is valid. Affected Pro...

6.3CVSS7.2AI score0.00359EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/06/18 5:44 a.m.•16 views

CVE-2024-33620

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker...

7AI score0.00678EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/06/18 5:44 a.m.•65 views

CVE-2024-33620

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker...

0.00678EPSS
SaveExploits0References2
CVE
CVE
•added 2024/06/18 5:44 a.m.•78 views

CVE-2024-33620

An absolute path traversal vulnerability (CWE-36) exists in ID Link Manager and FUJITSU Software TIME CREATOR products provided by Fsas Technologies Inc. An unauthenticated remote attacker can exploit this flaw to retrieve server file contents, potentially exposing sensitive information . Affecte...

8.6CVSS6.8AI score0.00678EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/06/18 5:44 a.m.•18 views

CVE-2024-33622

Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker...

6.4AI score0.00438EPSS
SaveExploits0References2
CVE
CVE
•added 2024/06/18 5:44 a.m.•81 views

CVE-2024-33622

A missing authentication for a critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR products by Fsas Technologies Inc. A remote authenticated attacker can exploit this flaw to obtain sensitive information or modify data stored in the database. Affected versi...

6.5CVSS6.4AI score0.00438EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/06/18 5:44 a.m.•60 views

CVE-2024-33622

Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker...

0.00438EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/06/18 4:43 a.m.•18 views

Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR

Overview ID Link Manager and FUJITSU Software TIME CREATOR provided by Fsas Technologies Inc. contain multiple vulnerabilities listed below. Path Traversal CWE-36 CVE-2024-33620 Missing Authentication CWE-306 CVE-2024-33622 Information disclosure CWE-204 CVE-2024-34024 Christian Demko of WithSecu...

8.6CVSS6.8AI score0.00678EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/18 12:00 a.m.•3 views

CVE-2024-33620: Absolute Path Traversal

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker...

8.6CVSS7.8AI score0.00678EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/18 12:00 a.m.•3 views

CVE-2024-34024: Undefined Security Weakness

Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not...

6.3CVSS7.9AI score0.00359EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/18 12:00 a.m.•14 views

PT-2024-25651 · Fujitsu · Fujitsu Software Time Creator

Name of the Vulnerable Software and Affected Versions: ID Link Manager affected versions not specified FUJITSU Software TIME CREATOR affected versions not specified Description: The issue allows an unauthenticated remote attacker to determine if a username is valid or not by exploiting an...

6.3CVSS7.1AI score0.00359EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/06/18 12:00 a.m.•19 views

Fujitsu ID Link Manager and Fujitsu TIME CREATOR Security Vulnerability

Fujitsu ID Link Manager and Fujitsu TIME CREATOR are both products of Fujitsu, Japan.Fujitsu ID Link Manager is an ID manager.Fujitsu TIME CREATOR is a business content management software. A security vulnerability exists in Fujitsu ID Link Manager and Fujitsu TIME CREATOR. A remote attacker coul...

8.6CVSS6.6AI score0.00678EPSS
SaveExploits0References4
Rows per page
Query Builder