Lucene search
+L

10375 matches found

OSV
OSV
added 2022/11/21 9:15 p.m.9 views

CVE-2022-43143

A cross-site scripting XSS vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error modal container...

9.6CVSS5.9AI score0.00823EPSS
SaveExploits1References1
Prion
Prion
added 2022/11/21 9:15 p.m.20 views

Cross site scripting

A cross-site scripting XSS vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error modal container...

6.8CVSS7.6AI score0.00823EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/11/21 12:00 a.m.43 views

CVE-2022-43143

A cross-site scripting XSS vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error modal container...

8AI score0.00823EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/11/21 12:00 a.m.7 views

CVE-2022-43143

A cross-site scripting XSS vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error modal container...

8AI score0.00823EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:00 a.m.18 views

The vulnerability of the Microsoft Visual Studio software lies in the lack of proper input data validation, which allows attackers to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software exists due to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.00795EPSS
SaveExploits0References3Affected Software3
CVE
CVE
added 2022/11/21 12:00 a.m.73 views

CVE-2022-43143

CVE-2022-43143 affects Beekeeper Studio v3.6.6 and is described as a cross-site scripting (XSS) vulnerability allowing arbitrary web scripts/HTML via a crafted payload injected into the error modal container. The CVSS v3.1 base score is 9.6 (CRITICAL) with network attack vector, no privileges req...

9.6CVSS7.7AI score0.00823EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/11/21 12:00 a.m.22 views

Beekeeper Studio 跨站脚本漏洞

Beekeeper Studio is a cross-platform, open source SQL editor and database manager from Beekeeper Studio, Inc. It is available for Linux, Mac, and Windows. A security vulnerability exists in Beekeeper Studio version v3.6.6, which originates from an attacker who can inject a crafted payload into a...

9.6CVSS8.5AI score0.00823EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/11/21 12:00 a.m.11 views

PT-2022-26773 · Unknown · Beekeeper Studio

Name of the Vulnerable Software and Affected Versions: Beekeeper Studio version 3.6.6 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error modal container. This enables the execution of malicious code...

9.6CVSS8.6AI score0.00823EPSS
SaveExploits1References5
IBM Security Bulletins
IBM Security Bulletins
added 2022/11/17 8:48 a.m.72 views

Security Bulletin: The Community Edition of IBM ILOG CPLEX Optimization Studio is affected by multiple vulnerabilities in libcurl (CVE-2022-42915, CVE-2022-42916, CVE-2022-32221)

Summary The Community Edition of IBM ILOG CPLEX Optimization Studio on Windows platform only has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2022-42915 DESCRIPTION: cURL libcurl is vulnerable to a denial of service, caused by a double-free flaw in the error/cleanup...

9.8CVSS9AI score0.04325EPSS
SaveExploits1Affected Software1
Gitee
Gitee
added 2022/11/14 6:00 p.m.2 views

SSCMS-PluginShell

安装VisualStudio 2. 导入该项目 3. 修改Startup.cs文件中的IPAddress.Parse值 c using Microsoft.Extensions.DependencyInjection; using SSCMS.Advertisement.Abstractions; using SSCMS.Advertisement.Core; using SSCMS.Plugins; using System.Diagnostics; using System; using System.Text; using System.Net.Sockets; using...

7.2AI score
SaveExploits0
Kitploit
Kitploit
added 2022/11/13 11:30 a.m.52 views

SCMKit - Source Code Management Attack Toolkit

S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system. Currently, the SCM...

7.5AI score
SaveExploits0References10
NVD
NVD
added 2022/11/11 4:15 p.m.43 views

CVE-2021-33064

Uncontrolled search path in the software installer for IntelR System Studio for all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00162EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/11 4:15 p.m.22 views

Design/Logic Flaw

Uncontrolled search path in the software installer for IntelR System Studio for all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

4.3CVSS7.8AI score0.00162EPSS
SaveExploits0References1
CVE
CVE
added 2022/11/11 3:49 p.m.547 views

CVE-2021-33064

CVE-2021-33064 affects Intel® System Studio. A vulnerability in the installer causes an uncontrolled search path, potentially enabling privilege escalation by an authenticated user with local access. Impact is local with high confidentiality/integrity/availability concerns per CVSS. Affected prod...

7.8CVSS7.7AI score0.00162EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/11 3:49 p.m.11 views

CVE-2021-33064

Uncontrolled search path in the software installer for IntelR System Studio for all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.8AI score0.00162EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/11/11 3:49 p.m.57 views

CVE-2021-33064

Uncontrolled search path in the software installer for IntelR System Studio for all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS8AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/11 12:00 a.m.7 views

PT-2022-10199 · Intel · Intel System Studio

Name of the Vulnerable Software and Affected Versions: IntelR System Studio affected versions not specified Description: The issue is related to an uncontrolled search path in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via local...

7.8CVSS7.5AI score0.00162EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/11/11 12:00 a.m.9 views

Intel System Studio 代码问题漏洞

Intel System Studio is a versatile, cross-platform tool suite from Intel Corporation. It is designed to simplify system startup and improve the performance of system and IoT device applications on Intel platforms. A security vulnerability exists in Intel System Studio, which originates from an...

7.8CVSS7.4AI score0.00162EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/11/10 12:46 a.m.24 views

Multiple vulnerabilities in OMRON products

Overview Machine automation controller NJ/NX series, Automation software "Sysmac Studio", and programmable terminal PT NA series provided by OMRON Corporation contain multiple vulnerabilities in the communication function. The vulnerabilities are as follows. Use of Hard-coded Credentials CWE-798 ...

9.4CVSS7.4AI score0.01781EPSS
SaveExploits0References13
ICS
ICS
added 2022/11/10 12:00 a.m.52 views

Omron NJ/NX-series Machine Automation Controllers

1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Omron Equipment: NJ/NX-series Controllers and Software Vulnerabilities: Hard-coded Credentials, Authentication Bypass by Capture-replay 2. RISK EVALUATION Successful...

9.4CVSS8.7AI score0.01781EPSS
SaveExploits0References5
Rows per page
Query Builder