Lucene search
K

999 matches found

Prion
Prion
added 2024/01/11 7:15 p.m.23 views

Design/Logic Flaw

A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic. This issue affects some unknown processing of the component HTTP POST Request Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the...

5CVSS7.1AI score0.01142EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2024/01/11 12:0 a.m.3 views

File Sharing Wizard security vulnerability

File Sharing Wizard is a file sharing and transfer software package. A security vulnerability exists in File Sharing Wizard version 1.5.0, which is a denial of service due to unknown code in the component HTTP POST Request Handler...

7.5CVSS6.9AI score0.01142EPSS
Exploits1References5
NVD
NVD
added 2024/01/10 1:15 a.m.9 views

CVE-2024-0357

A vulnerability was found in coderd-repos Eva 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /system/traceLog/page of the component HTTP POST Request Handler. The manipulation of the argument property leads to sql injection. The exploit has been...

9.8CVSS6.9AI score0.00651EPSS
Exploits1References3
Prion
Prion
added 2024/01/10 1:15 a.m.19 views

Sql injection

A vulnerability was found in coderd-repos Eva 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /system/traceLog/page of the component HTTP POST Request Handler. The manipulation of the argument property leads to sql injection. The exploit has been...

5.2CVSS7.7AI score0.00651EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2024/01/10 12:31 a.m.45 views

CVE-2024-0357

CVE-2024-0357 affects Eva 1.0.0 (coderd-repos). The vulnerability lies in the HTTP POST Request Handler for /system/traceLog/page, where manipulation of an argument property enables SQL injection. Multiple sources (NVD, Red Hat, CVE lists, vulnerability databases) classify the issue as critical w...

9.8CVSS9.6AI score0.00651EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2024/01/09 11:15 p.m.19 views

CVE-2024-0352

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to...

9.8CVSS8.7AI score0.70688EPSS
Exploits1References3
Prion
Prion
added 2024/01/09 11:15 p.m.15 views

Out-of-bounds

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to...

7.5CVSS7.3AI score0.70688EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2024/01/09 11:0 p.m.29 views

CVE-2024-0352 Likeshop HTTP POST Request File.php userFormImage unrestricted upload

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to...

7.5CVSS9.8AI score0.70688EPSS
Exploits1References3
CVE
CVE
added 2024/01/09 11:0 p.m.94 views

CVE-2024-0352

CVE-2024-0352 affects Likeshop up to 2.5.7.20210311. The vulnerability is in FileServer::userFormImage (file server/application/api/controller/File.php) where manipulating the file argument leads to unrestricted file upload. Impact scope includes remote execution potential with impact to confiden...

9.8CVSS9.5AI score0.70688EPSS
In wildExploits1References3Affected Software1
NVD
NVD
added 2024/01/09 4:15 p.m.18 views

CVE-2023-7222

A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of the file /bin/boa of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The atta...

9.8CVSS7.8AI score0.0132EPSS
Exploits1References3
Prion
Prion
added 2024/01/09 4:15 p.m.20 views

Buffer overflow

A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of the file /bin/boa of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The atta...

8.3CVSS7.3AI score0.0132EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2024/01/09 2:15 p.m.25 views

CVE-2023-7221

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

10CVSS9.7AI score0.01518EPSS
Exploits1References3
Prion
Prion
added 2024/01/09 2:15 p.m.19 views

Buffer overflow

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

10CVSS7.3AI score0.01518EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2024/01/09 2:0 p.m.62 views

CVE-2023-7221

Totolink T6 (version 4.1.9cu.5241_B20210923) is affected by CVE-2023-7221. A buffer overflow exists in the HTTP POST Request Handler at /cgi-bin/cstecgi.cgi?action=login, triggered by manipulating the v41 argument. The vulnerability can be exploited remotely and has been disclosed publicly. Sever...

10CVSS9.5AI score0.01518EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2024/01/08 6:15 a.m.15 views

CVE-2024-0300

A vulnerability was found in Byzoro Smart S150 Management Platform up to 20240101. It has been rated as critical. Affected by this issue is some unknown functionality of the file /useratte/userattestation.php of the component HTTP POST Request Handler. The manipulation of the argument webimg lead...

9.8CVSS7.1AI score0.05703EPSS
Exploits1References4
Prion
Prion
added 2024/01/07 7:15 p.m.24 views

Stack overflow

A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6139B20201216. Affected by this vulnerability is the function main of the file /cgi-bin/cstecgi.cgi?action=login&flag=1 of the component HTTP POST Request Handler. The manipulation of the argument v33 leads to stack-based...

6.5CVSS7.3AI score0.00903EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2024/01/07 7:0 p.m.51 views

CVE-2023-7213

CVE-2023-7213 affects Totolink N350RT (9.3.5u.6139_B20201216) in the HTTP POST Request Handler, specifically the function main at /cgi-bin/cstecgi.cgi?action=login&flag=1. The vulnerability arises from manipulating the argument v33, causing a stack-based buffer overflow that can be triggered remo...

8.8CVSS8.8AI score0.00903EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2023/12/31 2:15 p.m.14 views

CVE-2023-7187

A vulnerability was found in Totolink N350RT 9.3.5u.6139B20201216. It has been rated as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi?action=login&flag=ie8 of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. Th...

8.8CVSS0.00709EPSS
Exploits1References3
Prion
Prion
added 2023/12/31 2:15 p.m.23 views

Stack overflow

A vulnerability was found in Totolink N350RT 9.3.5u.6139B20201216. It has been rated as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi?action=login&flag=ie8 of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. Th...

5.2CVSS7.2AI score0.00709EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/12/31 2:0 p.m.50 views

CVE-2023-7187

The CVE-2023-7187 entry affects Totolink N350RT (v9.3.5u.6139_B20201216) where the HTTP POST Request Handler at /cgi-bin/cstecgi.cgi?action=login&flag=ie8 can trigger a stack-based buffer overflow in a vulnerable component. Publicly disclosed exploit and advisories indicate high severity with pot...

8.8CVSS7.2AI score0.00709EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder