Lucene search
+L

11728 matches found

Vulnrichment
Vulnrichment
•added 2025/02/20 7:15 p.m.•19 views

CVE-2025-0352 Rapid Response Monitoring My Security Account App Authorization Bypass Through User-Controlled Key

Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users...

8.7CVSS7.3AI score0.00358EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/02/20 12:00 a.m.•18 views

Nagios XI security vulnerabilities

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R1.2.2, which stems from a tool page that does no...

6.1CVSS6.8AI score0.01045EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•8 views

PT-2025-7458

Name of the Vulnerable Software and Affected Versions Rapid Response Monitoring My Security Account App affected versions not specified Description The issue concerns an API utilized by the Rapid Response Monitoring My Security Account App, which could be exploited by an attacker to modify reques...

8.7CVSS0.00358EPSS
SaveExploits0References15
CNNVD
CNNVD
•added 2025/02/20 12:00 a.m.•26 views

Rapid Response Monitoring: Vulnerabilities in My Security Account App

Rapid Response Monitoring My Security Account App is an account security program from Rapid Response Monitoring. A security vulnerability exists in Rapid Response Monitoring My Security Account App that stems from a failure to validate requested data modifications. An attacker exploiting this...

8.7CVSS6.3AI score0.00358EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/20 12:00 a.m.•10 views

CVE-2025-0352: Authorization Bypass Through User-Controlled Key

Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References1
Circl
Circl
•added 2025/02/19 9:02 p.m.•20 views

CVE-2024-27994

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:51+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodsycm625...

7.1CVSS6.9AI score0.00398EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/19 12:00 a.m.•18 views

PT-2025-7286 · Phpjabbers · Phpjabbers Hotel Booking System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Hotel Booking System version 4.0 Description: A lack of rate limiting in the "Login Section, Forgot Email" feature allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial o...

7.5CVSS6.9AI score0.00749EPSS
SaveExploits2References9
BDU FSTEC
BDU FSTEC
•added 2025/02/18 12:00 a.m.•35 views

Elastic Defend DoS

The vulnerability of the software for detecting, monitoring, and responding to Elastic Defend threats is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.5AI score0.00157EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2025/02/16 1:17 p.m.•19 views

CVE-2024-13152

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0...

10CVSS5.8AI score0.00508EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/14 1:15 p.m.•20 views

CVE-2024-13152

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0...

10CVSS0.00508EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/02/14 1:15 p.m.•16 views

CVE-2024-13152

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0...

10CVSS5.8AI score0.00508EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/02/14 12:00 a.m.•21 views

BSS Mobuy Online Machinery Monitoring Panel SQL Injection Vulnerability

BSS Mobuy Online Machinery Monitoring Panel is a software system for online monitoring of machinery and equipment from the Turkish company BSS. A SQL injection vulnerability exists in BSS Mobuy Online Machinery Monitoring Panel versions prior to 2.0, which is caused by SQL injection from a...

10CVSS7.7AI score0.00508EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/14 12:00 a.m.•22 views

PT-2025-6533

Name of the Vulnerable Software and Affected Versions BSS Software Mobuy Online Machinery Monitoring Panel versions prior to 2.0 Description The issue affects BSS Software Mobuy Online Machinery Monitoring Panel, allowing SQL Injection due to an Authorization Bypass Through User-Controlled SQL...

10CVSS7.5AI score0.00508EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/14 12:00 a.m.•11 views

CVE-2024-13152: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0...

10CVSS5.8AI score0.00508EPSS
SaveExploits0References2
Circl
Circl
•added 2025/02/13 10:26 p.m.•13 views

CVE-2024-53310

creationtimestamp| type| source ---|---|--- 2025-02-13 22:26:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113998927579207625 2025-02-13 23:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3sytdf2k2h 2025-02-14 00:35:11+00:00| seen|...

5.5CVSS4.8AI score0.00269EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/02/13 9:03 p.m.•38 views

CVE-2023-5122

Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing CSV data from a remote endpoint configured by an administrator. If this plugin was configured to send requests t...

5.3CVSS6.7AI score0.00509EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/02/13 5:45 p.m.•21 views

CVE-2023-3010

Grafana is an open-source platform for monitoring and observability. The WorldMap panel plugin, versions before 1.0.4 contains a DOM XSS vulnerability...

7.3CVSS6AI score0.0045EPSS
SaveExploits0References1
Circl
Circl
•added 2025/02/13 11:00 a.m.•26 views

CVE-2025-26473

creationtimestamp| type| source ---|---|--- 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-17 2025-02-13 21:21:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113998670958991211 2025-02-13 22:16:19+00:00| seen|...

8.7CVSS4.8AI score0.00463EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
•added 2025/02/13 10:16 a.m.•19 views

Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect VMware Agent from IBM Tivoli Monitoring for Virtual Environments.

Summary IBM java SDK is used by VMware Agent from IBM Tivoli Monitoring for Virtual Environments. Vulnerability Details CVEID:CVE-2024-21147 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause high confidentiality, high integrity...

7.4CVSS6.1AI score0.01257EPSS
SaveExploits0Affected Software1
Redos
Redos
•added 2025/02/13 12:00 a.m.•100 views

ROS-20250212-18

A vulnerability in the "Host Monitoring" component of the Zabbix universal monitoring system is related to incorrect code generation control. code generation control. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code by injecting it into the ping...

9.9CVSS7.1AI score0.01589EPSS
SaveExploits0
Rows per page
Query Builder