Lucene search
+L

228 matches found

Cvelist
Cvelist
added 2024/03/03 2:31 p.m.30 views

CVE-2024-2146 SourceCodester Online Mobile Management Store ?p=products cross site scripting

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launch...

4CVSS4.2AI score0.00566EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/03/03 2:00 p.m.47 views

CVE-2024-2145 SourceCodester Online Mobile Management Store update-tracker.php cross site scripting

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the...

4CVSS4.1AI score0.00582EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/03/03 2:00 p.m.22 views

CVE-2024-2145 SourceCodester Online Mobile Management Store update-tracker.php cross site scripting

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the...

4CVSS6.4AI score0.00582EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/03 12:00 a.m.11 views

SourceCodester Online Mobile Management Store Cross-Site Scripting Vulnerability

Online Mobile Store Management System is an online mobile store management system by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Online Mobile Management Store version 1.0, which stems from a cross-site scripting issue in the...

6.1CVSS6.3AI score0.00582EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/03/03 12:00 a.m.16 views

PT-2024-18876 · Unknown · Sourcecodester Online Mobile Management Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Mobile Management Store version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects an unknown function of the file /endpoint/update-tracker.php. The manipulation of the...

6.1CVSS4.3AI score0.00582EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/03/03 12:00 a.m.12 views

PT-2024-18933 · Sourcecodester · Sourcecodester Online Mobile Management Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Mobile Management Store version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /admin/product/manage product.php. The manipulation of the id argument...

9.8CVSS5.9AI score0.00621EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:00 a.m.17 views

The vulnerability of the WLAvalancheService service in the Avalanche device management system allows a hacker to cause a service failure.

The vulnerability of the WLAvalancheService service in the mobile device management system of Avalanche is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.4AI score0.09837EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:00 a.m.11 views

The vulnerability of the validateAMCWSConnection method in the Avalanche mobile device management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the validateAMCWSConnection method in the Avalanche mobile device management system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.4AI score0.82846EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:00 a.m.14 views

The vulnerability of the WLAvalancheService service in the Avalanche device management system allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the WLAvalancheService service in the mobile device management system of Avalanche is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary codes...

10CVSS8.2AI score0.06782EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:00 a.m.13 views

The vulnerability of the WLAvalancheService service in the Avalanche device management system allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the WLAvalancheService service in the mobile device management system of Avalanche is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary codes...

10CVSS8.2AI score0.11337EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/27 12:00 a.m.14 views

The vulnerability of the saveConfig method in the mobile device management system Avalanche allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the saveConfig method in the Avalanche mobile device management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code within the SYSTEM context...

7.8CVSS7.6AI score0.00695EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/08/10 12:00 a.m.13 views

Ivanti Avalanche security breach

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche 6.4.0 and earlier versions, which stems from an authentication...

7.5CVSS6.9AI score0.02445EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/05/09 12:00 a.m.11 views

Ivanti Avalanche 竞争条件问题漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche version 6.3.x and prior versions. An attacker could exploit the...

5.9CVSS6.1AI score0.66659EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/29 12:00 a.m.11 views

Ivanti Avalanche 路径遍历漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A path traversal vulnerability exists in Ivanti Avalanche version 6.3.3.101, which stems from a failure to properly...

9.8CVSS8.2AI score0.83436EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/10 12:00 a.m.11 views

Avalanche 授权问题漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. Avalanche version 6.3.x and prior versions have a security vulnerability that stems from improper authentication. A...

7.5CVSS7.5AI score0.64818EPSS
SaveExploits0References2
NVD
NVD
added 2023/01/20 7:15 a.m.27 views

CVE-2021-27782

HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced. User should be locked out for multiple invalid attempts...

7.5CVSS6.2AI score0.00346EPSS
SaveExploits0References1
Prion
Prion
added 2023/01/20 7:15 a.m.27 views

Code injection

HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced. User should be locked out for multiple invalid attempts...

5CVSS7.6AI score0.00346EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/05/25 12:00 a.m.12 views

HCL Technologies BigFix Mobile/Modern Client Management 安全漏洞

HCL Technologies BigFix Mobile/Modern Client Management is a mobile device management software client from HCL Technologies, India. Management versions v2.0 and v2.1 contain an information disclosure vulnerability that stems from the exposure of unencrypted sensitive information in PPKG files...

6.8CVSS5.6AI score0.00363EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:00 a.m.16 views

The vulnerability of the StatServer service in the Avalanche mobile device management system allows a hacker to execute arbitrary code.

The vulnerability of the StatServer service in the Avalanche mobile device management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...

10CVSS8.3AI score0.65833EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:00 a.m.9 views

The vulnerability of the implementation of the runAgentRestarter method in the mobile device management system Avalanche allows a hacker to execute arbitrary commands.

The vulnerability of the runAgentRestarter method in the mobile device management system Avalanche is related to insufficient cleaning of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted data...

10CVSS5.9AI score0.70132EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder