Lucene search
+L

259 matches found

Positive Technologies
Positive Technologies
added 2022/08/12 12:0 a.m.6 views

PT-2022-18748 · Unknown · Sourcecodester Automated Beer Parlour Billing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automated Beer Parlour Billing System affected versions not specified Description: A critical issue was found in the Login component, where the manipulation of the username argument leads to SQL injection. This can be initiated...

9.8CVSS9.6AI score0.00549EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/04/07 12:0 a.m.41 views

IBM MQ Appliance Denial of Service Vulnerability (CNVD-2022-36974)

IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM U.S.A. A denial-of-service vulnerability exists in IBM MQ Appliance, which can be exploited by attackers to conduct denial-of-service attacks via the application login component...

5.3CVSS5.4AI score0.01066EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/04/06 3:10 a.m.20 views

Denial Of Service (DoS)

IBM MQ is vulnerable to denial of serviceDOS attacks. The vulnerability exists due to a lack of validation in login component, which allows an attacker to crash the system by dropping the performance...

5.3CVSS3.8AI score0.01066EPSS
SaveExploits0References3Affected Software3
OSV
OSV
added 2022/04/05 5:15 p.m.2 views

CVE-2022-22355

IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance...

5.3CVSS5.8AI score0.01066EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/05 5:15 p.m.25 views

CVE-2022-22355

IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance...

5.3CVSS0.01066EPSS
SaveExploits0References2
Prion
Prion
added 2022/04/05 5:15 p.m.22 views

Design/Logic Flaw

IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance...

5CVSS5.7AI score0.01066EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/04/05 12:0 a.m.7 views

IBM MQ Appliance 安全漏洞

IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM U.S.A. A denial-of-service vulnerability exists in IBM MQ Appliance, which can be exploited by attackers to conduct denial-of-service attacks via the application login component...

5.3CVSS5.6AI score0.01066EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/04/04 12:0 a.m.5 views

CVE-2022-22355

IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance...

5.3CVSS6AI score0.01066EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/01/04 12:0 a.m.6 views

Google Chrome 资源管理错误漏洞

Google Chrome is a Web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which stems from repeated calls to freed resources by the product's login component. A remote attacker could use this vulnerability to create a specially crafted web page, trick a...

8.8CVSS8.9AI score0.01184EPSS
SaveExploits0References15
OSV
OSV
added 2021/09/09 11:15 p.m.13 views

CVE-2020-19281

A stored cross-site scripting XSS vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field...

5.4CVSS5.5AI score
SaveExploits0References2
CNVD
CNVD
added 2021/07/05 12:0 a.m.16 views

Zimbra Collaboration Suite Cross-Site Scripting Vulnerability

Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. A cross-site scripting vulnerability exists in the login component of the web client for Zimbra Collaboration Suite. An attacker could exploit this vulnerability by adding executable...

6.1CVSS6.5AI score0.0327EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/02 6:55 p.m.40 views

CVE-2021-35207

An issue was discovered in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.0 before 9.0.0 Patch 16. An XSS vulnerability exists in the login component of Zimbra Web Client, in which an attacker can execute arbitrary JavaScript by adding executable JavaScript to the loginErrorCode...

7AI score0.0327EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/07/02 12:0 a.m.9 views

Zimbra Collaboration Suite跨站脚本漏洞

Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. A cross-site scripting vulnerability exists in the login component of the web client for Zimbra Collaboration Suite. An attacker could exploit this vulnerability by adding executable...

6.1CVSS5.6AI score0.0327EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:0 a.m.6 views

The vulnerability of the Pre Login component of Oracle FLEXCUBE Direct Banking system allows a perpetrator to modify data or gain privileged access.

The vulnerability of the Pre Login component of the Oracle FLEXCUBE Direct Banking system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to modify data or gain privileged access using network packets...

2.1CVSS6.6AI score0.00611EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/04/21 12:0 a.m.7 views

Unspecified Vulnerability in Oracle FLEXCUBE Direct Banking (CNVD-2021-33850)

Oracle FLEXCUBE Direct Banking enables banks to deliver a tailored, portal-based, rich online customer experience based on demographics and market segments. A security vulnerability exists in the Pre Login component in Oracle FLEXCUBE Direct Banking versions 12.0.2, 12.0.3. An attacker could...

2.1CVSS6.2AI score0.00611EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:0 a.m.7 views

The vulnerability of the central/executar_login.php component of the Mk-Auth authentication software allows a hacker to execute arbitrary SQL queries against the database.

The vulnerability of the central/executarlogin.php component of the Mk-Auth authentication software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database in the target...

9.4CVSS8.2AI score0.01137EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/12 12:0 a.m.6 views

The vulnerability of the Pre-Login component of Oracle FLEXCUBE Direct Banking system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Pre-Login component of the Oracle FLEXCUBE Direct Banking system relates to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network...

7.1CVSS6.9AI score0.0193EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/09/09 2:15 p.m.4 views

CVE-2020-24197

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter...

9.8CVSS7.6AI score0.01426EPSS
SaveExploits1References2
Prion
Prion
added 2020/09/09 2:15 p.m.12 views

Sql injection

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter...

7.5CVSS9.8AI score0.01426EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
added 2020/04/15 12:0 a.m.18 views

FreeNAS 11.2 < 11.2-U8, 11.3 < 11.3-U1 DoS Vulnerability

FreeNAS is prone to a denial of service vulnerability in the login component. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

7.5CVSS7.5AI score0.02952EPSS
SaveExploits0References3
Rows per page
Query Builder