Lucene search
+L

6396 matches found

Cvelist
Cvelist
•added 2023/01/10 12:00 a.m.•42 views

CVE-2022-3792 SQL Injection in GullsEye Terminal Operating System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13...

9.8CVSS10AI score0.14187EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/10 12:00 a.m.•6 views

CVE-2022-3792: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13...

9.8CVSS5.8AI score0.14187EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2023/01/10 12:00 a.m.•17 views

Terminal Operating System SQL注入漏洞

Terminal Operating System is a terminal operating system that accelerates the flow of container, general cargo, liquid cargo, ro-ro and warehouse services at the terminal. A SQL injection vulnerability exists in Terminal Operating System versions prior to 5.0.13. An attacker could exploit this...

9.8CVSS8.7AI score0.14187EPSS
SaveExploits1References4
CVE
CVE
•added 2023/01/10 12:00 a.m.•82 views

CVE-2022-3792

CVE-2022-3792 describes an SQL Injection vulnerability in the GullsEye terminal operating system . According to the connected sources, the issue arises from improper neutralization of special elements used in SQL commands, allowing injection attacks. Affected are versions prior to 5.0.13 . The vu...

9.8CVSS7.4AI score0.14187EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2023/01/10 12:00 a.m.•4 views

PT-2023-1083 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a spoofing vulnerability in Microsoft Exchange Server, which can be exploited by a remote attacker to conduct a spoofing attack. This vulnerability...

8CVSS8.6AI score0.0155EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2023/01/07 6:30 p.m.•44 views

terminal-kit Inefficient Regular Expression Complexity vulnerability

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 can address this issue. The name of the patch is...

7.5CVSS4.8AI score0.0099EPSS
SaveExploits0References6Affected Software1
vulnersOsv
vulnersOsv
•added 2023/01/07 6:30 p.m.•8 views

ulcap-cli (>=1.0.8, <=1.0.31), zyzx-cli (1.0.31) potentially affected by CVE-2021-4306 via terminal-kit (2.1.0)

terminal-kit NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on terminal-kit and may be impacted: - ulcap-cli =1.0.8, =1.0.31 - zyzx-cli 1.0.31 Source cves: CVE-2021-4306 Source advisory: OSV:GHSA-WXGH-8GMR-3QH3...

7.5CVSS5.4AI score0.0099EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2023/01/07 6:30 p.m.•43 views

GHSA-WXGH-8GMR-3QH3 terminal-kit Inefficient Regular Expression Complexity vulnerability

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 can address this issue. The name of the patch is...

7.5CVSS7.6AI score0.0099EPSS
SaveExploits0References6
NVD
NVD
•added 2023/01/07 5:15 p.m.•36 views

CVE-2021-4306

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...

7.5CVSS5.1AI score0.0099EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2023/01/07 5:15 p.m.•31 views

CVE-2021-4306

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...

7.5CVSS7.7AI score
SaveExploits0References4
Prion
Prion
•added 2023/01/07 5:15 p.m.•27 views

Design/Logic Flaw

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...

5CVSS7.6AI score0.0099EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2023/01/07 4:29 p.m.•43 views

CVE-2021-4306 cronvel terminal-kit redos

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...

3.5CVSS7.8AI score0.0099EPSS
SaveExploits0References4
CVE
CVE
•added 2023/01/07 4:29 p.m.•83 views

CVE-2021-4306

The CVE-2021-4306 issue affects cronvel terminal-kit up to 2.1.7, with vulnerability to inefficient regular expression complexity (ReDoS) due to an unknown function. Impact is described as HIGH for availability (per CVSS) with network attack vector and no user interaction required. A fix is avail...

7.5CVSS5.6AI score0.0099EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2023/01/07 4:29 p.m.•6 views

CVE-2021-4306

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...

7.5CVSS0.0099EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/01/07 12:00 a.m.•19 views

Terminal Kit 安全漏洞

Terminal Kit is a command line tool for Node.js. A security vulnerability exists in Terminal Kit versions prior to 2.1.8, which stems from an unknown feature that operates to cause inefficient regular expression complexity...

7.5CVSS5.5AI score0.0099EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/01/07 12:00 a.m.•21 views

PT-2023-12410 · Unknown · Cronvel Terminal-Kit

Name of the Vulnerable Software and Affected Versions: cronvel terminal-kit versions up to 2.1.7 Description: A vulnerability has been found in cronvel terminal-kit, where the manipulation leads to inefficient regular expression complexity. This issue affects an unknown function. Recommendations:...

7.5CVSS7.2AI score0.0099EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/07 12:00 a.m.•8 views

CVE-2021-4306: Inefficient Regular Expression Complexity

A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is...

7.5CVSS5.2AI score0.0099EPSS
SaveExploits0References2
Huntr
Huntr
•added 2023/01/02 10:19 p.m.•33 views

ANSI Escape Sequence Injection

Description Injection of escape sequences opens up the possibility for concealing / modifying viewed data, and code execution as some esc seqs feed data back to stdin. Proof of Concept poc So far, the places I managed to find a successful injection are: - when running id from the file name - func...

4.4CVSS8AI score0.00362EPSS
SaveExploits1
NVD
NVD
•added 2023/01/01 8:15 a.m.•36 views

CVE-2022-37785

An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the configuration for terminal plugins...

7.5CVSS7.6AI score0.00542EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/01 12:00 a.m.•10 views

CVE-2022-37785: Cleartext Storage of Sensitive Information

An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the configuration for terminal plugins...

7.5CVSS5.8AI score0.00542EPSS
SaveExploits1References3
Rows per page
Query Builder