Lucene search
+L

6361 matches found

Microsoft CVE
Microsoft CVE
added 2024/08/16 7:0 a.m.6 views

Revert "sched/fair: Make sure to try to detach at least one movable task"

...

5.5CVSS7.3AI score0.00166EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2024/08/15 6:31 p.m.23 views

Improper Preservation of Permissions in xxl-job

Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component...

8.8CVSS8.1AI score0.00886EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2024/08/15 6:31 p.m.36 views

GHSA-CPFP-M5QW-C4R3 Improper Preservation of Permissions in xxl-job

Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component...

8.8CVSS6.2AI score0.00886EPSS
SaveExploits1References4
NVD
NVD
added 2024/08/15 5:15 p.m.35 views

CVE-2024-42681

Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component...

8.8CVSS0.00886EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/08/15 12:0 a.m.18 views

CVE-2024-42681

Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component...

7.8AI score0.00886EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/15 12:0 a.m.17 views

CVE-2024-42681

Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component...

8.8CVSS8.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/08/15 12:0 a.m.6 views

PT-2024-30107 · Xxl-Job · Xxl-Job

Name of the Vulnerable Software and Affected Versions: xxl-job version 2.4.1 Description: The issue allows a remote attacker to execute arbitrary code via the Sub-Task ID component due to insecure permissions. Recommendations: For xxl-job version 2.4.1, consider disabling the Sub-Task ID componen...

8.8CVSS8.6AI score0.00886EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/08/15 12:0 a.m.7 views

XXL-JOB 安全漏洞

XXL-JOB is a distributed task scheduling platform by the individual developer xuxueli. A security vulnerability exists in XXL-JOB v.2.4.1, which is caused by an arbitrary code execution vulnerability in the Sub-Task component...

8.8CVSS7.5AI score0.00886EPSS
SaveExploits1References2
CVE
CVE
added 2024/08/15 12:0 a.m.84 views

CVE-2024-42681

CVE-2024-42681 affects the XXL-JOB platform (xxl-job v2.4.1) where the Sub-Task ID component has insecure permissions that allow a remote attacker to execute arbitrary code. Root cause: improper access control/validation in the Sub-Task ID path. Impact: potential remote code execution with high s...

8.8CVSS8.1AI score0.00886EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2024/08/14 9:15 p.m.32 views

CVE-2024-7793

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack can be...

5.4CVSS0.00447EPSS
SaveExploits1References4
OSV
OSV
added 2024/08/14 9:15 p.m.7 views

CVE-2024-7793

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack can be...

5.4CVSS3.8AI score0.00447EPSS
SaveExploits1References4
CVE
CVE
added 2024/08/14 9:0 p.m.66 views

CVE-2024-7793

CVE-2024-7793 affects SourceCodester Task Progress Tracker 1.0. A vulnerability in the file /endpoint/add-task.php arises from unsafely handling the task_name parameter, enabling cross-site scripting. The issue is exploitable remotely and has been publicly disclosed. Multiple sources corroborate ...

5.4CVSS3.9AI score0.00447EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/08/14 9:0 p.m.75 views

CVE-2024-7793 SourceCodester Task Progress Tracker add-task.php cross site scripting

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack can be...

5.3CVSS0.00447EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/08/14 9:0 p.m.17 views

CVE-2024-7793 SourceCodester Task Progress Tracker add-task.php cross site scripting

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack can be...

5.3CVSS6.2AI score0.00447EPSS
SaveExploits1References4
NVD
NVD
added 2024/08/14 7:15 p.m.29 views

CVE-2024-7792

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been classified as critical. Affected is an unknown function of the file /endpoint/delete-task.php. The manipulation of the argument task leads to sql injection. It is possible to launch the attack remotely. The exploit...

8.8CVSS0.00573EPSS
SaveExploits1References4
OSV
OSV
added 2024/08/14 7:15 p.m.5 views

CVE-2024-7792

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been classified as critical. Affected is an unknown function of the file /endpoint/delete-task.php. The manipulation of the argument task leads to sql injection. It is possible to launch the attack remotely. The exploit...

8.8CVSS5.8AI score0.00573EPSS
SaveExploits1References4
CVE
CVE
added 2024/08/14 6:31 p.m.50 views

CVE-2024-7792

The CVE-2024-7792 entry relates to SourceCodester Task Progress Tracker 1.0. Affected component: the function handling the task parameter in /endpoint/delete-task.php. Root cause: input manipulation leading to SQL injection. Impact: remote exploitation with potential impact to confidentiality, in...

8.8CVSS6.8AI score0.00573EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/14 6:31 p.m.14 views

CVE-2024-7792 SourceCodester Task Progress Tracker delete-task.php sql injection

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been classified as critical. Affected is an unknown function of the file /endpoint/delete-task.php. The manipulation of the argument task leads to sql injection. It is possible to launch the attack remotely. The exploit...

6.5CVSS6.8AI score0.00573EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/08/14 6:31 p.m.37 views

CVE-2024-7792 SourceCodester Task Progress Tracker delete-task.php sql injection

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been classified as critical. Affected is an unknown function of the file /endpoint/delete-task.php. The manipulation of the argument task leads to sql injection. It is possible to launch the attack remotely. The exploit...

6.5CVSS0.00573EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/08/14 12:0 a.m.8 views

SourceCodester Task Progress Tracker 安全漏洞

SourceCodester Task Progress Tracker is a task progress tracker from SourceCodester, Inc. A security vulnerability exists in SourceCodester Task Progress Tracker version 1.0, which stems from an incorrect manipulation of the parameter task that can lead to sql injection...

8.8CVSS6.8AI score0.00573EPSS
SaveExploits1References5
Rows per page
Query Builder