Lucene search
+L

9974 matches found

CNNVD
CNNVD
added 2024/08/01 12:0 a.m.6 views

SourceCodester Tracking Monitoring Management System SQL注入漏洞

SourceCodester Tracking Monitoring Management System is a monitoring management system from SourceCodester Inc. A SQL injection vulnerability exists in SourceCodester Tracking Monitoring Management System version 1.0, which is caused by an SQL injection vulnerability in the id parameter of the...

9.8CVSS7AI score0.00544EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/08/01 12:0 a.m.5 views

SourceCodester Tracking Monitoring Management System 跨站脚本漏洞

SourceCodester Tracking Monitoring Management System is a monitoring management system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Tracking Monitoring Management System version 1.0, which is caused by a cross-site scripting vulnerability in the name...

6.1CVSS4.5AI score0.00453EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/08/01 12:0 a.m.7 views

The vulnerability of the mknotifyd software, a monitoring tool for IT infrastructure, allows a perpetrator to execute arbitrary commands.

The vulnerability of the mknotifyd software for monitoring IT infrastructure systems in Checkmk is related to improper elimination of separators. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

6.5CVSS5.9AI score0.00472EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/01 12:0 a.m.8 views

The vulnerability of the Dashboard component in the event monitoring, threat detection, and security analytics platform IBM QRadar Suite and IBM Cloud Pak for Security allows a perpetrator to modify the parameters of the monitoring panel.

The vulnerability of platformes for monitoring events, detecting threats, and performing security analytics in IBM QRadar Suite and IBM Cloud Pak for Security exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to alter the parameters o...

4.3CVSS5.4AI score0.00348EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/08/01 12:0 a.m.11 views

The vulnerabilities of the event monitoring, threat detection, and security analytics platforms of IBM QRadar Suite and IBM Cloud Pak for Security allow attackers to execute arbitrary commands.

The vulnerability of platform monitoring systems for events detection, threat detection, and security analytics in IBM QRadar Suite and IBM Cloud Pak for Security exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

7.5CVSS5.8AI score0.00368EPSS
SaveExploits0References6Affected Software2
The Hacker News
The Hacker News
added 2024/07/30 11:26 a.m.19 views

The Power and Peril of RMM Tools

As more people work remotely, IT departments must manage devices distributed over different cities and countries relying on VPNs and remote monitoring and management RMM tools for system administration. However, like any new technology, RMM tools can also be used maliciously. Threat actors can...

7.7AI score
SaveExploits0
NVD
NVD
added 2024/07/29 5:15 p.m.20 views

CVE-2024-6748

Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monitoring...

8.3CVSS0.23784EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/29 4:20 p.m.80 views

CVE-2024-6748

CVE-2024-6748 affects Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM (versions 128317 and below). The vulnerability is an authenticated SQL injection in the URL monitoring component. Connected sources confirm affected products/versions and the authentication requirement; n...

8.3CVSS8.6AI score0.23784EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/29 4:20 p.m.73 views

CVE-2024-6748 SQL Injection

Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monitoring...

8.3CVSS0.23784EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/07/29 3:9 p.m.1401 views

Exploit for Improper Encoding or Escaping of Output in Exim

Exim CVE-2024-39929 Exploit PoC This repository contains a Pr...

5.4CVSS4.6AI score0.41225EPSS
SaveExploits5
Positive Technologies
Positive Technologies
added 2024/07/29 12:0 a.m.6 views

PT-2024-37844 · Zoho · Opmanager Plus +3

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below Description: The issue concerns an authenticated SQL injection vulnerability in the URL monitoring feature. Recommendations: For versions 128317...

8.3CVSS8.1AI score0.23784EPSS
SaveExploits0References3
OSV
OSV
added 2024/07/26 6:15 p.m.7 views

CVE-2024-38872

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...

8.8CVSS5.8AI score0.03052EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/26 6:15 p.m.39 views

CVE-2024-38872

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...

8.8CVSS0.03052EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/26 5:30 p.m.44 views

CVE-2024-38872 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...

8.3CVSS0.03052EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/26 5:30 p.m.19 views

CVE-2024-38872 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...

8.3CVSS7.7AI score0.03052EPSS
SaveExploits0References1
Rapid7 Blog
Rapid7 Blog
added 2024/07/25 7:54 p.m.13 views

From Top Dogs to Unified Pack

Embracing a consolidated security ecosystem Cybersecurity is as unpredictable as it is rewarding. Each day often presents a new set of challenges and responsibilities, particularly as organizations accelerate digital transformation efforts. This means you and your cyber team may find yourselves...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/07/25 12:0 a.m.9 views

PT-2024-11579 · Ibm · Ibm Security Directory Integrator +1

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Integrator version 7.2.0 IBM Security Verify Directory Integrator version 10.0.0 Description: The issue is related to insufficient session expiration, which could allow an unauthorized user to obtain sensitive...

7.5CVSS7.4AI score0.00378EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/07/25 12:0 a.m.11 views

The vulnerability of the Cacti network monitoring software lies in the lack of security measures taken to protect the structure of the web page. This allows attackers to execute cross-site scripting attacks.

The vulnerability of the Cacti network monitoring software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting using a specially crafted page...

8.7CVSS7.6AI score0.00913EPSS
SaveExploits1References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/24 12:0 a.m.9 views

The vulnerabilities of the event monitoring, threat detection, security analytics platforms of IBM QRadar Suite, as well as the IBM Cloud Pak for Security security platform, allow attackers to gain access to confidential information.

The vulnerabilities of event monitoring platforms, threat detection systems, security analytics in the IBM QRadar Suite, and IBM Cloud Pak for Security related to security configuration errors can be exploited by attackers operating remotely. This allows them to gain access to confidential...

5.9CVSS5.4AI score0.00465EPSS
SaveExploits0References5Affected Software2
Imperva Blog
Imperva Blog
added 2024/07/23 1:0 p.m.36 views

Imperva Customers Protected Against Critical ServiceNow Vulnerability

Introduction ServiceNow is a widely used platform for IT service management, and its security is paramount for businesses relying on it for their operations. Recently, a critical vulnerability was discovered that could potentially allow attackers to access all data within ServiceNow instances. Th...

9.3CVSS8.7AI score0.99976EPSS
SaveExploits9
Rows per page
Query Builder