Lucene search
+L

625 matches found

OSV
OSV
added 2023/03/02 9:15 a.m.9 views

CVE-2021-45478

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.This issue affects Library Automation System: before 19.2...

6.5CVSS5.8AI score0.0059EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/03/02 9:15 a.m.7 views

CVE-2021-45478

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2...

6.5CVSS6.6AI score0.0059EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/02 9:15 a.m.7 views

CVE-2021-45477

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.This issue affects Library Automation System: before 19.2...

6.5CVSS5.8AI score0.0059EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/03/02 9:15 a.m.5 views

CVE-2021-45477

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2...

6.5CVSS6.6AI score0.0059EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/03/02 8:24 a.m.11 views

CVE-2021-45477 IDOR in Yordam Library Automation System

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2...

6.5CVSS6.6AI score0.0059EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/03/02 12:00 a.m.9 views

PT-2023-12559 · Bordam Information Technologies · Bordam Information Technologies Library Automation System

Name of the Vulnerable Software and Affected Versions: Bordam Information Technologies Library Automation System versions prior to 19.2 Description: The issue is related to improper handling of parameters, allowing data collection as provided by users. Recommendations: For versions prior to 19.2,...

6.5CVSS6.4AI score0.0059EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/03/02 12:00 a.m.9 views

PT-2023-12560 · Bordam Information Technologies · Bordam Information Technologies Library Automation System

Name of the Vulnerable Software and Affected Versions: Bordam Information Technologies Library Automation System versions prior to 19.2 Description: The issue is related to improper handling of parameters, allowing data collection as provided by users. Recommendations: For versions prior to 19.2,...

6.5CVSS6.4AI score0.0059EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/02 12:00 a.m.11 views

YORDAM University Library Automation System 跨站脚本漏洞

YORDAM University Library Automation System is a university library automation system from YORDAM. A security vulnerability exists in the YORDAM University Library Automation System prior to version 19.2, which stems from mishandling of the system's parameters and allows the collection of...

5.4CVSS5.7AI score0.00355EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/02/28 12:00 a.m.6 views

PT-2023-21054 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS affected versions not specified Description: The issue is related to an open redirect vulnerability that exposes OpenCATS to template injection. This occurs due to improper validation of user-supplied GET parameters. Recommendations:...

5.4CVSS5.4AI score0.01027EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/02/25 12:00 a.m.14 views

Clinic’s Patient Management System SQL注入漏洞

Clinic's Patient Management System is a patient management system for a clinic by Carlo Montero. A SQL injection vulnerability exists in Clinic's Patient Management System version 1.0, which stems from an incorrect manipulation of the parameter userid that can lead to sql injection...

8.8CVSS7.1AI score0.007EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2023/02/24 12:15 p.m.7 views

CVE-2021-4105

Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion. This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727...

9.8CVSS7.3AI score0.00872EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/02/24 12:15 p.m.12 views

CVE-2021-4105

Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion.This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727...

9.8CVSS5.8AI score0.00872EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/02/24 11:09 a.m.12 views

CVE-2021-4105 Unauthenticated Remote Code Execution on COSLAT Firewall

Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion. This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727...

9.8CVSS7.3AI score0.00872EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/02/24 12:00 a.m.12 views

BG-TEK COSLAT Firewall 安全漏洞

BG-TEK COSLAT Firewall is a series of firewalls from the Turkish company BG-TEK. A security vulnerability exists in BG-TEK COSLAT Firewall versions 5.24.0.R.20180630 through 5.24.0.R.20210727, which stems from improper handling of a parameter in the firewall, leading to remote code execution...

9.8CVSS8.8AI score0.00872EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/02/23 12:00 a.m.10 views

SourceCodester Yoga Class Registration System SQL注入漏洞

Yoga Class Registration System is a yoga class registration system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Yoga Class Registration System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...

9.8CVSS7.2AI score0.00541EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2023/02/18 12:00 a.m.9 views

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which is caused by an incorrect manipulation of a parameter ID that results in an sql injection...

9.8CVSS7.2AI score0.00473EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:46 a.m.7 views

SUSE CVE-2012-2660

actionpack/lib/actiondispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended...

6.4CVSS7AI score0.046EPSS
SaveExploits1References10
SUSE CVE
SUSE CVE
added 2023/02/15 4:23 a.m.6 views

SUSE CVE-2018-18250

Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item...

7.5CVSS7.7AI score0.00995EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/02/06 12:00 a.m.11 views

WordPress plugin share-on-diaspora 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.1CVSS4.2AI score0.00523EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/02/02 12:00 a.m.16 views

Cisco Iox 操作系统命令注入漏洞

Cisco Iox is a secure development environment from Cisco that combines Cisco IOS and Linux OS for secure network connectivity and development of IOT applications. A security vulnerability exists in Cisco Iox that stems from incomplete cleaning of parameters passed in to activate an application,...

8.8CVSS8.6AI score0.01506EPSS
SaveExploits0References3
Rows per page
Query Builder