Lucene search
+L

11778 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:12 p.m.6 views

Malicious code in pingone-angular-registration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fd36cbebd01483bfd774db2fd99658fbe6939e416871b3cf3236bffa61edfe0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:12 p.m.12 views

MAL-2022-5338 Malicious code in pingone-angular-registration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fd36cbebd01483bfd774db2fd99658fbe6939e416871b3cf3236bffa61edfe0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
CNVD
CNVD
added 2022/06/20 12:00 a.m.30 views

Student Registration and Fee Payment System SQL Injection Vulnerability

Student Registration and Fee Payment System is a student registration and fee payment management system. student registration and fee payment system v1.0 is vulnerable to SQL injection, which originates from /scms/student. php is missing SQL data filtering and escaping. An attacker could use this...

7.2CVSS2.6AI score0.00929EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/17 6:15 p.m.9 views

CVE-2022-21184

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

5.9CVSS6.2AI score0.00447EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/17 6:15 p.m.18 views

CVE-2022-21184

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

5.9CVSS0.00447EPSS
SaveExploits0References1
Prion
Prion
added 2022/06/17 6:15 p.m.20 views

Information disclosure

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

4.3CVSS5.4AI score0.00447EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/17 5:40 p.m.34 views

CVE-2022-21184

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

5.9CVSS5.6AI score0.00447EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/17 12:00 a.m.13 views

The vulnerability of the Azure SDK for .NET development software package lies in its insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerability of the Azure SDK for .NET development software package lies in the insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

6.8CVSS6.6AI score0.02179EPSS
SaveExploits0References3
NVD
NVD
added 2022/06/16 3:15 p.m.19 views

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

7.2CVSS0.00929EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/16 3:15 p.m.9 views

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

7.2CVSS5.8AI score0.00929EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/16 3:15 p.m.4 views

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

7.2CVSS5.9AI score0.00929EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/16 3:15 p.m.21 views

Sql injection

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

6.5CVSS7.3AI score0.00929EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/06/16 2:49 p.m.73 views

CVE-2022-31908

CVE-2022-31908 affects the Student Registration and Fee Payment System v1.0. The vulnerability is a SQL Injection via the login/registration endpoint at /scms/student.php, caused by missing input data filtering/escaping. This allows an attacker to inject SQL commands and potentially access/modify...

7.2CVSS7.3AI score0.00929EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/16 2:49 p.m.30 views

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

7.7AI score0.00929EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/06/16 12:00 a.m.10 views

Student Registration and Fee Payment System SQL注入漏洞

Student Registration and Fee Payment System is a student registration and fee payment management system. student registration and fee payment system v1.0 is vulnerable to SQL injection, which originates from /scms/student. php is missing SQL data filtering and escaping. An attacker could use this...

7.2CVSS6AI score0.00929EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/06/14 12:00 a.m.9 views

PT-2022-10415 · Qualcomm · Snapdragon Mobile +1

Name of the Vulnerable Software and Affected Versions: Snapdragon Connectivity, Snapdragon Mobile affected versions not specified Description: The issue is related to improper serialization of message queue client registration, which can cause a race condition. This condition allows multiple guny...

8.4CVSS6.8AI score0.00148EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/06/14 12:00 a.m.9 views

PT-2022-3484 · Unknown · Data Center Expert

Name of the Vulnerable Software and Affected Versions: Data Center Expert versions prior to 7.9.0 Description: The issue is related to insufficient protection of registration data in the Data Center Expert software. This could allow a remote attacker to gain full control over the software. The...

9.8CVSS9.3AI score0.00537EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2022/06/14 12:00 a.m.12 views

The vulnerability of the logging component of Cisco Expressway micro-programming software and the Cisco TelePresence Video Communication Server micro-programming software for call management devices allows a perpetrator to disclose protected information.

The vulnerability of the logging component of Cisco Expressway microprogramming software and the Cisco TelePresence Video Communication Server microprogramming software management device relates to the disclosure of information through registration files. Exploiting this vulnerability can allow a...

4.3CVSS6.5AI score0.00933EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2022/06/14 12:00 a.m.15 views

PT-2022-3520 · Unknown · Data Center Expert

Name of the Vulnerable Software and Affected Versions: Data Center Expert versions prior to 7.9.0 Description: The issue is related to insufficient protection of registration data, which could allow a remote attacker to gain full control over the software. This could result in unwanted access to ...

9.8CVSS9.3AI score0.00537EPSS
SaveExploits0References9
CNVD
CNVD
added 2022/06/09 12:00 a.m.64 views

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel SQL Injection Vulnerability

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel is a user registration and login system with an administrative panel from EGavilan Media. EGavilan Media User-Registration -and-Login-System-With-Admin-Panel version 1.0 contains a SQL injection vulnerability, which stems from...

9.8CVSS5.6AI score0.01283EPSS
SaveExploits1References1
Rows per page
Query Builder