Lucene search
+L

180 matches found

Cvelist
Cvelist
added 2024/08/25 2:0 a.m.35 views

CVE-2024-8141 SourceCodester Daily Calories Monitoring Tool add-calorie.php cross site scripting

A vulnerability was found in SourceCodester Daily Calories Monitoring Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-calorie.php. The manipulation of the argument caloriedate/caloriename leads to cross site scripting. It is possible to...

5.3CVSS0.00386EPSS
SaveExploits1References5
CVE
CVE
added 2024/08/25 2:0 a.m.59 views

CVE-2024-8141

Vulnerability: SourceCodester Daily Calories Monitoring Tool 1.0 has a cross-site scripting flaw in /endpoint/add-calorie.php through manipulated calorie_date/calorie_name parameters. Impact per sources is client-side injection with remote exploit potential; exploit has been publicly disclosed. A...

5.4CVSS3.8AI score0.00386EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2024/08/25 12:0 a.m.10 views

SourceCodester Daily Calories Monitoring Tool 跨站脚本漏洞

SourceCodester Daily Calories Monitoring Tool is a daily calories monitoring tool from SourceCodester, Inc. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Daily Calories Monitoring Tool, which stems from a cross-site scripting vulnerability in the...

5.4CVSS4.5AI score0.00386EPSS
SaveExploits1References6
OSV
OSV
added 2024/08/12 1:38 p.m.7 views

CVE-2024-40472

Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."...

9.8CVSS5.8AI score0.00664EPSS
SaveExploits0References2
CVE
CVE
added 2024/08/09 12:0 a.m.51 views

CVE-2024-40472

SourceCodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via delete-calorie.php. Multiple sources (NVD, Red Hat, CNNVD, CVE lists, PT Security) confirm an injection flaw in the PHP/MySQL component, enabling data disclosure/integrity/availability impact per CVSS scores (hi...

9.8CVSS8.1AI score0.00664EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/09 12:0 a.m.19 views

CVE-2024-40472

Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."...

8.4AI score0.00664EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/20 8:0 a.m.14 views

CVE-2024-5134 SourceCodester Electricity Consumption Monitoring Tool delete-bill.php sql injection

A vulnerability was found in SourceCodester Electricity Consumption Monitoring Tool 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-bill.php. The manipulation of the argument bill leads to sql injection. The attack can be initiated...

6.5CVSS7.5AI score0.00579EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/05/20 8:0 a.m.31 views

CVE-2024-5134 SourceCodester Electricity Consumption Monitoring Tool delete-bill.php sql injection

A vulnerability was found in SourceCodester Electricity Consumption Monitoring Tool 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-bill.php. The manipulation of the argument bill leads to sql injection. The attack can be initiated...

6.5CVSS6.8AI score0.00579EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/05/20 12:0 a.m.5 views

PT-2024-34602 · Sourcecodester · Sourcecodester Electricity Consumption Monitoring Tool

Name of the Vulnerable Software and Affected Versions: SourceCodester Electricity Consumption Monitoring Tool version 1.0 Description: A critical issue has been identified, affecting the /endpoint/delete-bill.php file. The manipulation of the bill argument leads to SQL injection. This issue can b...

9.8CVSS7.3AI score0.00579EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
added 2024/05/14 3:11 p.m.27 views

CVE-2024-27082

Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular...

7.6CVSS7.1AI score0.00913EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.9 views

Cacti 安全漏洞

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti team. The tool fetches data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A security vulnerability exists in Cacti versions prior to 1.2.27, which...

5.7CVSS9.1AI score0.00838EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.8 views

Cacti 安全漏洞

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A security vulnerability exists in Cacti versions prior to 1.2.27, which...

8.8CVSS9.8AI score0.26154EPSS
SaveExploits1References6
Fedora
Fedora
added 2024/05/11 1:32 a.m.24 views

[SECURITY] Fedora 40 Update: tcpdump-4.99.4-7.fc40

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a...

6.2CVSS7AI score0.00289EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/02/28 12:0 a.m.10 views

The vulnerability of the monitoringwizard.php file, a monitoring tool for IT infrastructure, allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the monitoringwizard.php file, a tool for monitoring IT infrastructure, relates to the possibility of embedding commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

6.5CVSS8.1AI score0.45884EPSS
SaveExploits5References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.8 views

The vulnerability of the monitoring tool for VMware Aria Operations lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.7CVSS6.3AI score0.00498EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.10 views

The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protective measures for the website structure, allows attackers to execute cross-site scripting attacks (XSS).

The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

4.8CVSS5.6AI score0.37849EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.9 views

The vulnerability of the monitoring tool for VMware Aria Operations, related to errors in privilege management, allows a perpetrator to escalate their privileges.

The vulnerability of the monitoring tool for VMware Aria Operations is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.4AI score0.00214EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/12/11 10:32 p.m.30 views

CVE-2023-49804 Uptime Kuma Password Change Vulnerability

Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, when a user changes their login password in Uptime Kuma, a previously logged-in user retains access without being logged out. This behavior persists consistently, even after system restarts or browser restarts. Th...

6.7CVSS7.5AI score0.00263EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.9 views

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the monitoring and security management tool Trend Micro Apex Central exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks remotely...

5.5CVSS6AI score0.00332EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2023/12/01 10:15 p.m.40 views

CVE-2023-49276

Uptime Kuma is an open source self-hosted monitoring tool. In affected versions the Google Analytics element in vulnerable to Attribute Injection leading to Cross-Site-Scripting XSS. Since the custom status interface can set an independent Google Analytics ID and the template has not been...

6.3CVSS0.00497EPSS
SaveExploits1References2
Rows per page
Query Builder