Lucene search
+L

7580 matches found

CVE
CVE
added 2023/07/17 12:00 a.m.68 views

CVE-2023-37769

The CVE-2023-37769 entry concerns Pixman. A stress-test commit e4c878 contains a Field-Processing-Error (FPE) vulnerability in the function combine_inner used by pixman-combine-float.c. Documents indicate the issue affects Pixman and list an impact on availability, with confidentiality and integr...

6.5CVSS6.4AI score0.00586EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2023/07/17 12:00 a.m.17 views

WordPress Quiz And Survey Master Plugin <= 8.1.10 is vulnerable to Broken Access Control

Software Quiz And Survey Master Type Plugin Vulnerable versions = 8.1.10 Fixed in 8.1.11 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-37984 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 046309de9fe7 Credits qilin99 Required...

6.3AI score0.00462EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/07/15 12:00 a.m.11 views

AC Repair and Services System SQL注入漏洞

AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Personal Developer. AC Repair and Services System version 1.0 suffers from a SQL injection vulnerability that originates in the parameter id of file /classes/Master.php?f=deleteinquiry which can lead ...

9.8CVSS7.2AI score0.005EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/15 12:00 a.m.11 views

Redis Labs Redis 安全漏洞

Redis Labs Redis is an open source, network-enabled, memory-based, persistent logging, key-value Key-Value storage database written in ANSI C from Redis Labs, Inc. that provides APIs in multiple languages. A security vulnerability exists in versions prior to Redis 6cbea7d that allows a replica to...

5.9CVSS6.6AI score0.01309EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/07/15 12:00 a.m.10 views

Lost and Found Information System SQL注入漏洞

Lost and Found Information System is a lost and found information system by the individual developer of oretnom23. A SQL injection vulnerability exists in Lost and Found Information System version 1.0, which originates from the parameter id of the file /classes/Master.php?f=saveitem that can lead...

9.8CVSS7AI score0.00492EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/15 12:00 a.m.24 views

PT-2023-25698 · Sourcecodester · Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue affects the HTTP POST Request Handler component, specifically the file /classes/Master.php?f=save inquiry. The manipulation of the id argument leads to...

9.8CVSS6.9AI score0.00492EPSS
SaveExploits0References6
OSV
OSV
added 2023/07/13 10:15 a.m.9 views

CVE-2023-3657

A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. This issue affects some unknown processing of the file Master.php?f=savebook of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injectio...

9.8CVSS5.8AI score0.00541EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/07/13 12:00 a.m.8 views

PT-2023-25624 · Sourcecodester · Sourcecodester Ac Repair/Services System

Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue has been found in the processing of the file Master.php?f=save book of the component HTTP POST Request Handler. The manipulation of the id argument leads t...

9.8CVSS7.9AI score0.00541EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/07/13 12:00 a.m.9 views

AC Repair and Services System SQL注入漏洞

AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Individual Developer. SourceCodester AC Repair and Services System 1.0 suffers from a SQL injection vulnerability that stems from the parameter id of the file /classes/Master.php?f=saveinquiry which c...

9.8CVSS7.1AI score0.00541EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/13 12:00 a.m.10 views

PT-2023-25625 · Sourcecodester · Ac Repair/Services System

Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue was found in the HTTP POST Request Handler component, specifically in the file Master.php?f=delete book. The manipulation of the id argument leads to sql...

9.8CVSS7.4AI score0.00541EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/07/12 12:00 a.m.9 views

PT-2023-25574 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A critical issue has been found in the system, affecting the /classes/Master.php file, specifically when f=save inquiry. The manipulation of the id argument leads to S...

9.8CVSS7.3AI score0.00492EPSS
SaveExploits0References6
OSV
OSV
added 2023/07/11 4:15 p.m.9 views

CVE-2023-3619

A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the file Master.php?f=saveservice of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The...

9.8CVSS5.9AI score0.00492EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/11 12:00 a.m.11 views

AC Repair and Services System SQL注入漏洞

AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester AC Repair and Services System version 1.0 due to some unknown processing in the Master.php?f=saveservice file in the componen...

9.8CVSS7.1AI score0.00492EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/11 12:00 a.m.9 views

GPAC 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in the GPAC v2.3-DEV-rev381-g817a848f6-master version, which stems from a memory segment error in the dumpisomscene method of the /mp4box/filedump.c file...

5.5CVSS5.6AI score0.00332EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/07/11 12:00 a.m.9 views

PT-2023-25473 · Sourcecodester · Sourcecodester Ac Repair/Services System

Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue affects the processing of the file Master.php?f=save service in the HTTP POST Request Handler component. The manipulation of the id argument leads to sql...

9.8CVSS8.1AI score0.00492EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/07/11 12:00 a.m.9 views

PT-2023-26098 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev381-g817a848f6-master Description: A segmentation violation was discovered in the gf isom remove user data function at /lib/libgpac.so. This issue affects the specified version of GPAC. Recommendations: For GPAC versio...

5.5CVSS6.7AI score0.00331EPSS
SaveExploits1References13
OSV
OSV
added 2023/07/10 8:15 p.m.11 views

CVE-2023-30765

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation...

9.8CVSS5.8AI score0.01967EPSS
SaveExploits1References1
NVD
NVD
added 2023/07/10 8:15 p.m.30 views

CVE-2023-30765

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation...

9.8CVSS9.2AI score0.01967EPSS
SaveExploits1References1
OSV
OSV
added 2023/07/10 8:15 p.m.7 views

CVE-2023-34316

​An attacker could bypass the latest Delta Electronics InfraSuite Device Master versions prior to 1.0.7 patch, which could allow an attacker to retrieve file contents...

7.5CVSS5.8AI score0.00615EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/10 8:15 p.m.27 views

Authentication flaw

?An attacker could bypass the latest Delta Electronics InfraSuite Device Master versions prior to 1.0.7 patch, which could allow an attacker to retrieve file contents...

5CVSS7.6AI score0.00615EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder