Lucene search
+L

248 matches found

osv_cve
osv_cve
•added 2023/02/04 7:34 a.m.•27 views

CVE-2023-0674 XXL-JOB New Password updatePwd cross-site request forgery

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

4.3CVSS5AI score0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/02/04 12:00 a.m.•22 views

XXL-JOB 跨站请求伪造漏洞

XXL-JOB is a distributed task scheduling platform based on java language from XU Xueli XXL-JOB community. A cross-site request forgery vulnerability exists in XXL-JOB version 2.3.1, which stems from some unknown functionality in the file /user/updatePwd of the component New Password Handler,...

6.5CVSS5AI score0.00387EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/04 12:00 a.m.•9 views

CVE-2023-0674: Cross-Site Request Forgery (CSRF)

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

6.5CVSS5.2AI score0.00387EPSS
SaveExploits1References2
NVD
NVD
•added 2022/05/24 4:15 p.m.•35 views

CVE-2013-10004

A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwordScramble in the library SAMwinLIBVB.dll of the component Password Handler. Incorrect implementation of a hashing function leads to...

9.8CVSS0.00979EPSS
SaveExploits1References2
Prion
Prion
•added 2022/05/24 4:15 p.m.•28 views

Design/Logic Flaw

A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwordScramble in the library SAMwinLIBVB.dll of the component Password Handler. Incorrect implementation of a hashing function leads to...

5CVSS7.3AI score0.00979EPSS
SaveExploits1References2Affected Software2
CVE
CVE
•added 2022/05/24 3:30 p.m.•69 views

CVE-2013-10004

CVE-2013-10004 affects Telecommunication Software SAMwin Contact Center Suite 5.1. The issue is in the Password Handler component, specifically the function passwordScramble in SAMwinLIBVB.dll, where an incorrect hashing implementation enables predictable authentication. Upgrading to SAMwin Conta...

9.8CVSS8.1AI score0.00979EPSS
SaveExploits1References2Affected Software2
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•7 views

PT-2022-7727

Name of the Vulnerable Software and Affected Versions Telecommunication Software SAMwin Contact Center Suite version 5.1 Description A critical issue was found in the Password Handler component, specifically affecting the passwordScramble function in the SAMwinLIBVB.dll library. This is due to an...

9.8CVSS0.00979EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/24 12:00 a.m.•12 views

CVE-2013-10004: Improper Authentication

A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwordScramble in the library SAMwinLIBVB.dll of the component Password Handler. Incorrect implementation of a hashing function leads to...

9.8CVSS7.7AI score0.00979EPSS
SaveExploits1References3
Rows per page
Query Builder