Lucene search
+L

39 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/08 12:00 a.m.•2 views

CVE-2023-31180: Improper Neutralization of Input During Web Page Generation

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting RXSS through an unspecified request...

6.1CVSS5.6AI score0.00379EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/05/08 12:00 a.m.•23 views

CVE-2023-24507 AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload

AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload - Vulnerability allows insecure file upload, by an unspecified request...

8.8CVSS9.7AI score0.00701EPSS
SaveExploits0References1
NVD
NVD
•added 2023/02/15 7:15 p.m.•24 views

CVE-2023-23463

Sunell DVR, latest version, Insufficiently Protected Credentials CWE-522 may be exposed through an unspecified request...

7.5CVSS6.1AI score0.00462EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/15 7:15 p.m.•25 views

Design/Logic Flaw

Sunell DVR, latest version, Insufficiently Protected Credentials CWE-522 may be exposed through an unspecified request...

5CVSS7.6AI score0.00462EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/15 7:15 p.m.•28 views

Design/Logic Flaw

Sunell DVR, latest version, CWE-200: Exposure of Sensitive Information to an Unauthorized Actor through an unspecified request...

4CVSS6.5AI score0.00529EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/02/15 12:00 a.m.•10 views

CVE-2023-23463 Sunell DVR – Insufficiently Protected Credentials

Sunell DVR, latest version, Insufficiently Protected Credentials CWE-522 may be exposed through an unspecified request...

5.3CVSS7AI score0.00462EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/02/15 12:00 a.m.•39 views

CVE-2023-23463 Sunell DVR – Insufficiently Protected Credentials

Sunell DVR, latest version, Insufficiently Protected Credentials CWE-522 may be exposed through an unspecified request...

5.3CVSS7.8AI score0.00462EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/02/15 12:00 a.m.•18 views

Sunell DVR 安全漏洞

Sunell DVR is a series of digital video recorders from Sunell. A security vulnerability exists in Sunell DVR that stems from the device not adequately protecting credentials, which could be exploited by an attacker to disclose credentials via an unspecified request...

7.5CVSS7.3AI score0.00462EPSS
SaveExploits0References2
Prion
Prion
•added 2018/01/21 7:29 a.m.•18 views

Design/Logic Flaw

JBMC DirectAdmin before 1.52, when the emailftppasswordchange setting is nonzero, allows remote attackers to obtain access or cause a denial of service segfault via an unspecified request...

7.5CVSS9.1AI score0.01393EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/01/21 7:29 a.m.•22 views

CVE-2017-18045

JBMC DirectAdmin before 1.52, when the emailftppasswordchange setting is nonzero, allows remote attackers to obtain access or cause a denial of service segfault via an unspecified request...

9.8CVSS9.3AI score0.01393EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/01/21 7:00 a.m.•25 views

CVE-2017-18045

JBMC DirectAdmin before 1.52, when the emailftppasswordchange setting is nonzero, allows remote attackers to obtain access or cause a denial of service segfault via an unspecified request...

9.3AI score0.01393EPSS
SaveExploits0References1
OSV
OSV
•added 2017/05/02 3:59 p.m.•15 views

CVE-2017-7216

The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sensitive information via unspecified request parameters...

6.5CVSS5.8AI score0.01197EPSS
SaveExploits0References2
NVD
NVD
•added 2017/04/14 2:59 p.m.•30 views

CVE-2017-7218

The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters...

7.8CVSS7.5AI score0.00544EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2016/06/07 12:00 a.m.•180 views

CVE-2016-4437

Apache Shiro before 1.2.5, when a cipher key has not been configured for the “remember me” feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter. Recent assessments: sv3nbeast at April 17, 2020 12:15pm UTC reported: ...

9.8CVSS8AI score0.93039EPSS
SaveIn wildExploits10References8
CNVD
CNVD
•added 2015/04/16 12:00 a.m.•17 views

Unspecified Request Handling Denial of Service Vulnerability in IBM WebSphere Portal

IBM WebSphere Portal consists of middleware, applications called portlets and development tools for building and managing secure business-to-business B2B, business-to-customer B2C and business-to-employee B2E portals. An unspecified request handling denial of service vulnerability exists in IBM...

7.8CVSS6.8AI score0.01895EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2013/06/14 7:00 p.m.•43 views

CVE-2013-3958

The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for remote attackers to obtain access via an unspecified request...

6.5AI score0.01934EPSS
SaveExploits0References1
Prion
Prion
•added 2010/12/22 9:00 p.m.•31 views

Path traversal

HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified request that triggers disclosure of the full path...

5CVSS6.7AI score0.02255EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2009/06/25 11:14 p.m.•4 views

CVE-2009-2214

The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service CPU consumption via an unspecified request...

5CVSS5.6AI score0.01721EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2008/06/11 6:43 p.m.•12 views

X.org Render extension AllocateGlyph() heap buffer overflow

Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based buffer overflow...

9CVSS8.1AI score0.03178EPSS
SaveExploits0References4
Rows per page
Query Builder