Lucene search
+L

4047 matches found

BDU FSTEC
BDU FSTEC
added 2022/06/10 12:00 a.m.14 views

The vulnerability of the Scheduler sub-component of the Oracle BI Publisher software, a component of the Oracle Fusion Middleware software platform. This vulnerability allows an attacker to execute arbitrary code, as well as to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Scheduler sub-component of the Oracle BI Publisher software component of the Oracle Fusion Middleware software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely, as well as...

9CVSS8.2AI score0.34677EPSS
SaveExploits0References3Affected Software1
Kitploit
Kitploit
added 2022/06/04 10:30 p.m.43 views

COM-Hunter - COM Hijacking VOODOO

COM Hijacking VOODOO COM-hunter is a COM Hijacking persistnce tool written in C. This tool was inspired during the RTO course of @zeropointsecltd Features Finds out entry valid CLSIDs in the victim's machine. Finds out valid CLSIDs via Task Scheduler in the victim's machine. Finds out if someone...

7.2AI score
SaveExploits0References2
GithubExploit
GithubExploit
added 2022/05/25 10:47 a.m.66 views

Exploit for Improper Authentication in Atlassian Jira_Data_Center

Atlassian Jira Seraph Authentication Bypass RCE(CVE-2022-0540)...

9.8CVSS7.6AI score0.88057EPSS
SaveExploits2
OSV
OSV
added 2022/05/24 5:44 p.m.14 views

GHSA-FQFF-VCVX-68H3 Grav CMS Cross-Site Request Forgery (CSRF)

The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into visiting a malicious website CSRF...

8.8CVSS6.6AI score0.01361EPSS
SaveExploits2References3
Github Security Blog
Github Security Blog
added 2022/05/24 5:44 p.m.29 views

Grav CMS Cross-Site Request Forgery (CSRF)

The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into visiting a malicious website CSRF...

8.8CVSS7.1AI score0.02899EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2022/05/18 3:15 p.m.7 views

CVE-2022-28717

Cross-site scripting vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions, WATCH BOOT...

4.8CVSS6.2AI score0.00558EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/18 3:15 p.m.23 views

CVE-2022-28717

Cross-site scripting vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions, WATCH BOOT...

4.8CVSS0.00558EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/18 3:15 p.m.7 views

CVE-2022-27632

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

8.8CVSS6AI score0.00515EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/18 3:15 p.m.9 views

CVE-2022-27632

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

8.8CVSS6.2AI score0.00515EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/18 3:15 p.m.4 views

CVE-2022-28717

Cross-site scripting vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions, WATCH BOOT...

4.8CVSS6.2AI score0.00558EPSS
SaveExploits0References3
NVD
NVD
added 2022/05/18 3:15 p.m.23 views

CVE-2022-27632

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

8.8CVSS0.00515EPSS
SaveExploits0References2
Prion
Prion
added 2022/05/18 3:15 p.m.21 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

6.8CVSS8.8AI score0.00515EPSS
SaveExploits0References2Affected Software8
Cvelist
Cvelist
added 2022/05/18 9:50 a.m.37 views

CVE-2022-28717

Cross-site scripting vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions, WATCH BOOT...

6.1AI score0.00558EPSS
SaveExploits0References2
CVE
CVE
added 2022/05/18 9:50 a.m.89 views

CVE-2022-28717

CVE-2022-28717 is a cross-site scripting vulnerability reported in MEIKYO ELECTRIC devices (notably Rebooter family: WATCH BOOT nino RPC-M2C, WATCH BOOT light RPC-M5C, WATCH BOOT L-zero RPC-M4L, WATCH BOOT mini RPC-M4H, WATCH BOOT nino RPC-M2CS, WATCH BOOT light RPC-M5CS, WATCH BOOT L-zero RPC-M4...

4.8CVSS5.7AI score0.00558EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/05/18 9:50 a.m.85 views

CVE-2022-27632

CVE-2022-27632 is a CSRF vulnerability in MEIKYO ELECTRIC Rebooters and related devices (e.g., WATCH BOOT nino RPC-M2C, WATCH BOOT light RPC-M5C, WATCH BOOT L-zero RPC-M4L, WATCH BOOT mini RPC-M4H, WATCH BOOT nino RPC-M2CS, Signage Rebooter RPC-M4HSi, PoE BOOT nino PoE8M2, TIME BOOT mini RSC-MT4H...

8.8CVSS8.8AI score0.00515EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2022/05/18 12:00 a.m.52 views

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2022-54340)

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. A cross-site scripting vulnerability exists in Cybozu Garoon, which is caused by a failure to adequately clean user-supplied data in the scheduler. An attacker could exploit the vulnerability to execute JavaScript code on the...

4.8CVSS2.5AI score0.00542EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/18 12:00 a.m.39 views

Cybozu Garoon Input Validation Error Vulnerability (CNVD-2022-54301)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An input validation error vulnerability exists in Cybozu Garoon, which stems from insufficient user-supplied inpu...

4.3CVSS4.8AI score0.00705EPSS
SaveExploits0References1
OSV
OSV
added 2022/05/17 5:25 a.m.21 views

GHSA-XXGM-QPJ5-4886 OpenStack Nova Scheduler denial of service through scheduler_hints

The Nova scheduler in OpenStack Compute Nova Folsom 2012.2 and Essex 2012.1, when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service excessive database lookup calls and server hang via a request with many repeated IDs in the...

3.5CVSS5.8AI score0.01862EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2022/05/17 5:25 a.m.44 views

OpenStack Nova Scheduler denial of service through scheduler_hints

The Nova scheduler in OpenStack Compute Nova Folsom 2012.2 and Essex 2012.1, when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service excessive database lookup calls and server hang via a request with many repeated IDs in the...

3.5CVSS6.8AI score0.01862EPSS
SaveExploits1References8Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/05/16 5:25 a.m.165 views

Multiple vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-1584CyVDB-2670 Operation restriction bypass vulnerability in Bulletin CWE-285 - CVE-2022-28718 CyVDB-1865CyVDB-2692 Operation restriction bypass vulnerability in Workflow CWE-285 - CVE-2022-27661...

8.1CVSS6.6AI score0.01079EPSS
SaveExploits0References40
Rows per page
Query Builder