Lucene search
+L

172 matches found

Positive Technologies
Positive Technologies
added 2023/09/29 12:0 a.m.12 views

PT-2023-32017 · Xinhu · Xinhu Rockoa

Name of the Vulnerable Software and Affected Versions: Xinhu RockOA versions 1.1 through 2.3.2 Xinhu RockOA version 15.X3amdi Description: A vulnerability was found in the Password Handler component of Xinhu RockOA, affecting some unknown functionality of the file api.php?m=reimplat&a=index. This...

7.5CVSS5AI score0.00422EPSS
SaveExploits1References6
NVD
NVD
added 2023/08/06 11:15 a.m.19 views

CVE-2023-4183

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file editupdate.php of the component Password Handler. The manipulation of the argument userid leads to improper access controls. The atta...

9.8CVSS5.9AI score0.00431EPSS
SaveExploits0References2
OSV
OSV
added 2023/08/06 11:15 a.m.6 views

CVE-2023-4183

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file editupdate.php of the component Password Handler. The manipulation of the argument userid leads to improper access controls. The atta...

9.8CVSS4.9AI score0.00431EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/08/06 11:0 a.m.32 views

CVE-2023-4183 SourceCodester Inventory Management System Password edit_update.php access control

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file editupdate.php of the component Password Handler. The manipulation of the argument userid leads to improper access controls. The atta...

4.3CVSS9.8AI score0.00431EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/06 12:0 a.m.9 views

Inventory Management System Access Control Error Vulnerability

Inventory Management System is an inventory management system by the individual developers of stemword. An Access Control Error vulnerability exists in the SourceCodester Inventory Management System version 1.0 due to incorrect access control of the userid parameter on the editupdate.php page via...

9.8CVSS6.9AI score0.00431EPSS
SaveExploits0References3
OSV
OSV
added 2023/08/05 6:15 p.m.7 views

CVE-2023-4169

A vulnerability was found in Ruijie RG-EW1200G 1.01B1P5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/sys/setpasswd of the component Administrator Password Handler. The manipulation leads to improper access controls. The attack can ...

8.8CVSS5.3AI score0.47109EPSS
SaveExploits5References3
Cvelist
Cvelist
added 2023/08/05 6:0 p.m.38 views

CVE-2023-4169 Ruijie RG-EW1200G Administrator Password set_passwd access control

A vulnerability was found in Ruijie RG-EW1200G 1.01B1P5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/sys/setpasswd of the component Administrator Password Handler. The manipulation leads to improper access controls. The attack can ...

6.5CVSS8.9AI score0.47109EPSS
SaveExploits5References3
Positive Technologies
Positive Technologies
added 2023/08/05 12:0 a.m.9 views

PT-2023-28048 · Ruijie · Ruijie Rg-Ew1200G

Name of the Vulnerable Software and Affected Versions: Ruijie RG-EW1200G version 1.01B1P5 Description: A critical issue has been found in the Administrator Password Handler component, specifically affecting an unknown functionality of the file "/api/sys/set passwd". This leads to improper access...

9.8CVSS6.7AI score0.56147EPSS
SaveExploits7References10
OSV
OSV
added 2023/07/19 6:15 a.m.5 views

CVE-2023-3760

A vulnerability has been found in Intergard SGS 8.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclose...

6.5CVSS4.8AI score0.00994EPSS
SaveExploits1References3
NVD
NVD
added 2023/07/19 6:15 a.m.27 views

CVE-2023-3760

A vulnerability has been found in Intergard SGS 8.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclose...

6.5CVSS5.1AI score0.00994EPSS
SaveExploits1References3
Prion
Prion
added 2023/07/19 6:15 a.m.24 views

Design/Logic Flaw

A vulnerability has been found in Intergard SGS 8.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclose...

4CVSS6.5AI score0.00994EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/07/19 12:0 a.m.9 views

Intergard SGS 安全漏洞

Intergard SGS is a security appliance from the Brazilian company Intergard. A security vulnerability exists in Intergard SGS version 8.7.0, which stems from the presence of an unknown function in the component Change Password Handler, resulting in the transmission of sensitive information in clea...

7.5CVSS5.4AI score0.0049EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/07/19 12:0 a.m.9 views

PT-2023-26037 · Unknown · Intergard Sgs

Name of the Vulnerable Software and Affected Versions: Intergard SGS version 8.7.0 Description: A vulnerability has been found in the Change Password Handler component, which can be exploited to cause a denial of service. The attack can be launched remotely. The vendor was contacted about this...

6.5CVSS7.1AI score0.00994EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2023/07/19 12:0 a.m.10 views

Intergard SGS 安全漏洞

Intergard SGS is a security appliance from Brazilian company Intergard. A security vulnerability exists in Intergard SGS version 8.7.0, which stems from the presence of an unknown function in the component Change Password Handler, resulting in a denial of service...

6.5CVSS5.2AI score0.00994EPSS
SaveExploits1References4
NVD
NVD
added 2023/06/18 8:15 a.m.23 views

CVE-2023-3306

A vulnerability was found in Ruijie RG-EW1200G EW3.01B11P204. It has been declared as critical. This vulnerability affects unknown code of the file app.09df2a9e44ab48766f5f.js of the component Admin Password Handler. The manipulation leads to improper access controls. The attack can be initiated...

9.8CVSS7.9AI score0.23065EPSS
SaveExploits5References3
Prion
Prion
added 2023/06/18 8:15 a.m.26 views

Improper access control

A vulnerability was found in Ruijie RG-EW1200G EW3.01B11P204. It has been declared as critical. This vulnerability affects unknown code of the file app.09df2a9e44ab48766f5f.js of the component Admin Password Handler. The manipulation leads to improper access controls. The attack can be initiated...

7.5CVSS9.4AI score0.23065EPSS
SaveExploits5References3Affected Software1
CVE
CVE
added 2023/06/18 8:0 a.m.77 views

CVE-2023-3306

CVE-2023-3306 concerns Ruijie RG-EW1200G (EW_3.0(1)B11P204) within the Admin Password Handler, specifically the file app.09df2a9e44ab48766f5f.js. The vulnerability enables improper access controls, enabling remote exploitation. Multiple sources consistently describe it as critical and disclose th...

9.8CVSS7.8AI score0.23065EPSS
SaveExploits5References3Affected Software1
Cvelist
Cvelist
added 2023/06/18 8:0 a.m.39 views

CVE-2023-3306 Ruijie RG-EW1200G Admin Password app.09df2a9e44ab48766f5f.js access control

A vulnerability was found in Ruijie RG-EW1200G EW3.01B11P204. It has been declared as critical. This vulnerability affects unknown code of the file app.09df2a9e44ab48766f5f.js of the component Admin Password Handler. The manipulation leads to improper access controls. The attack can be initiated...

7.5CVSS9.7AI score0.23065EPSS
SaveExploits5References3
Vulnrichment
Vulnrichment
added 2023/06/18 8:0 a.m.7 views

CVE-2023-3306 Ruijie RG-EW1200G Admin Password app.09df2a9e44ab48766f5f.js access control

A vulnerability was found in Ruijie RG-EW1200G EW3.01B11P204. It has been declared as critical. This vulnerability affects unknown code of the file app.09df2a9e44ab48766f5f.js of the component Admin Password Handler. The manipulation leads to improper access controls. The attack can be initiated...

7.5CVSS6.8AI score0.23065EPSS
SaveExploits5References3
Positive Technologies
Positive Technologies
added 2023/06/18 12:0 a.m.7 views

PT-2023-24165 · Ruijie · Ruijie Rg-Ew1200G

Name of the Vulnerable Software and Affected Versions: Ruijie RG-EW1200G version EW 3.01B11P204 Description: A critical issue has been found, affecting the Admin Password Handler component, specifically the file app.09df2a9e44ab48766f5f.js. This leads to improper access controls, and the attack c...

9.8CVSS7.1AI score0.23065EPSS
SaveExploits5References7
Rows per page
Query Builder