Lucene search
+L

448 matches found

BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.9 views

The vulnerability of Redmine’s project and task management web application regarding information disclosure allows attackers to gain access to confidential data.

The vulnerability of the Redmine web application journal for managing projects and tasks involves the exposure of projectid. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

7.5CVSS7.2AI score0.01158EPSS
SaveExploits0References8Affected Software3
OpenVAS
OpenVAS
added 2021/10/21 12:0 a.m.22 views

Fedora: Security Advisory for rt (FEDORA-2021-05feb8a8b2)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.01835EPSS
SaveExploits0References2
Fedora
Fedora
added 2021/10/13 8:26 p.m.33 views

[SECURITY] Fedora 33 Update: rt-4.4.5-4.fc33

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitted by a community of users...

7.5CVSS7.4AI score0.01835EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/06/21 12:0 a.m.25 views

White Shark System 信息泄露漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A website physical path disclosure vulnerability exis...

5.3CVSS5.4AI score0.00895EPSS
SaveExploits0References3
NVD
NVD
added 2021/06/18 3:15 a.m.26 views

CVE-2021-34809

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

9.9CVSS0.01935EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/18 3:15 a.m.9 views

CVE-2021-34811

Server-Side Request Forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors...

4.3CVSS5.8AI score0.00764EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/18 3:15 a.m.8 views

CVE-2021-34809

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

8.8CVSS6.1AI score0.01935EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/18 3:15 a.m.24 views

CVE-2021-34811

Server-Side Request Forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors...

5CVSS0.00764EPSS
SaveExploits0References1
Prion
Prion
added 2021/06/18 3:15 a.m.23 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors...

4CVSS4.4AI score0.00764EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/06/18 3:15 a.m.18 views

Command injection

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

6.5CVSS8.6AI score0.01935EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/06/18 3:0 a.m.34 views

CVE-2021-34809

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

9.9CVSS9.5AI score0.01935EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/06/17 12:0 a.m.10 views

Synology Download Station 代码问题漏洞

Synology Download Station is a download management tool for Synology. A server-side request forgery vulnerability exists in the Synology Download Station task management component, which can be exploited by remote attackers to submit a special request to obtain sensitive information...

5CVSS5.7AI score0.00764EPSS
SaveExploits0References2
Prion
Prion
added 2021/06/01 2:15 p.m.16 views

Server side request forgery (ssrf)

Server-Side request forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors...

4CVSS7AI score0.01EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/06/01 9:50 a.m.54 views

CVE-2021-33184

Synology Download Station (task management component) is affected by CVE-2021-33184. The vulnerability is a Server-Side Request Forgery (SSRF) that can be exploited by remote authenticated users to read arbitrary files via unspecified vectors. Affected versions are before 3.8.15-3563. The connect...

7.7CVSS7AI score0.01EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/06/01 9:50 a.m.29 views

CVE-2021-33184

Server-Side request forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors...

7.7CVSS7.3AI score0.01EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/05/26 9:23 a.m.7 views

CVE-2021-33184

Server-Side request forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors...

7.7CVSS7.1AI score0.01EPSS
SaveExploits0References2
Exploit DB
Exploit DB
added 2020/12/11 12:0 a.m.730 views

Courier Management System 1.0 - 'ref_no' SQL Injection

Exploit Title: Courier Management System 1.0 - 'refno' SQL Injection Exploit Author: Zhaiyi Zeo Date: 2020-12-11 Vendor Homepage: https://www.sourcecodester.com/php/14615/task-management-system-using-phpmysqli-source-code.html Software Link:...

5.3AI score
SaveExploits0
Oracle linux
Oracle linux
added 2020/12/02 12:0 a.m.114 views

Unbreakable Enterprise kernel security update

4.1.12-124.45.6 - qla2xxx: disable target reset during link reset and update version Quinn Tran Orabug: 32095664 - scsi: qla2xxx: Fix early srb free on abort Quinn Tran Orabug: 32095664 - scsi: qla2xxx: Fix comment in MODULEPARMDESC in qla2xxx Masanari Iida Orabug: 32095664 - scsi: qla2xxx: Enabl...

5.5CVSS7AI score0.05271EPSS
SaveExploits0
CNVD
CNVD
added 2020/11/18 12:0 a.m.57 views

PESCMS Team Cross-Site Scripting Vulnerability

PESCMS TEAM is an open source team task management system under the GPLv2 license. a cross-site scripting vulnerability exists in PESCMS Team 2.3.2. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

6.1CVSS1.9AI score0.0269EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2020/07/15 12:30 p.m.37 views

Natlas - Scaling Network Scanning

You've got a lot of maps and they are getting pretty unruly. What do you do? You put them in a book and call it an atlas. This is like that, except it's a website and it's a collection of nmaps. The Natlas server doubles as a task manager for the agents to get work, allowing you to control the...

7.1AI score
SaveExploits0References12
Rows per page
Query Builder