Lucene search
+L

12643 matches found

Vulnrichment
Vulnrichment
added 2023/09/14 12:00 a.m.9 views

CVE-2023-38912

SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter...

8.6AI score0.01409EPSS
SaveExploits1References2
Citrix
Citrix
added 2023/09/13 12:00 a.m.20 views

Windows Workspace Authentication Error "incorrect user name or password" via NetScaler Gateway

When using Windows workspace, after input username, password and passcode, error prompt "incorrect username or password"two-factor basic authentication. And can't access Storefront resource list. While access same Gateway with Web Browser is working fine...

7.3AI score
SaveExploits0
OSV
OSV
added 2023/09/12 10:15 a.m.7 views

CVE-2023-40725

A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames...

4CVSS5.7AI score0.00187EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/12 9:32 a.m.59 views

CVE-2023-40725

CVE-2023-40725 affects Siemens QMS Automotive (all versions prior to v12.39). The issue arises from inconsistent login error messages in response to invalid credentials, enabling attacker-controlled username enumeration. Public sources (NVD/Red Hat security page and Siemens ProductCERT advisory S...

4CVSS4.1AI score0.00187EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/12 9:32 a.m.8 views

CVE-2023-40725

A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames...

4CVSS4.1AI score0.00187EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/09/12 12:00 a.m.9 views

Siemens QMS Automotive 安全漏洞

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive has an information disclosure hole that can be exploited by an attacker to enumerate usernames and identify valid usernames...

4CVSS6.3AI score0.00187EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/09/12 12:00 a.m.10 views

PT-2023-5182 · Unknown · Qms Automotive

Name of the Vulnerable Software and Affected Versions: QMS Automotive versions prior to V12.39 Description: A vulnerability has been identified in QMS Automotive that allows an attacker to enumerate usernames and identify valid usernames due to the application returning inconsistent error message...

4CVSS3.9AI score0.00187EPSS
SaveExploits0References6
OSV
OSV
added 2023/09/11 8:15 p.m.11 views

CVE-2023-40946

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

9.8CVSS5.8AI score0.00752EPSS
SaveExploits1References1
NVD
NVD
added 2023/09/11 8:15 p.m.25 views

CVE-2023-40946

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

9.8CVSS9.8AI score0.00752EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/09/11 8:15 p.m.5 views

CVE-2023-40946

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

9.8CVSS5.8AI score0.00752EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/09/11 12:00 a.m.18 views

PT-2023-9201 · Tp Link · Tp-Link Omada Er605

Name of the Vulnerable Software and Affected Versions: TP-Link Omada ER605 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. The flaw exists within the handling of the...

7.5CVSS7.9AI score0.0071EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/09/11 12:00 a.m.14 views

PT-2023-27714 · Unknown · Schoolmate

Name of the Vulnerable Software and Affected Versions: Schoolmate version 1.3 Description: The issue concerns SQL Injection in the ValidateLogin.php file, specifically affecting the variable $username from the SESSION. Recommendations: For Schoolmate version 1.3, consider restricting access to th...

9.8CVSS9.8AI score0.00752EPSS
SaveExploits1References3
OSV
OSV
added 2023/09/08 3:15 a.m.13 views

CVE-2023-41615

Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields...

9.8CVSS5.8AI score0.00984EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/09/08 3:15 a.m.13 views

CVE-2023-41594

Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters...

7.5CVSS7.2AI score0.00963EPSS
SaveExploits1References4
OSV
OSV
added 2023/09/08 3:15 a.m.13 views

CVE-2023-41594

Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters...

7.5CVSS5.8AI score0.00963EPSS
SaveExploits1References3
Prion
Prion
added 2023/09/08 3:15 a.m.25 views

Sql injection

Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters...

5CVSS8AI score0.00963EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/09/08 12:00 a.m.14 views

Dairy Farm Shop Management System SQL Injection Vulnerability

Dairy Farm Shop Management System is a Dairy Farm Shop Management System by Anuj Kumar, an individual developer. A security vulnerability exists in Dairy Farm Shop Management System Using PHP and MySQL v1.1, which stems from multiple SQL injection vulnerabilities in the Username and Password...

7.5CVSS8.1AI score0.00963EPSS
SaveExploits1References4
GithubExploit
GithubExploit
added 2023/09/07 7:49 a.m.16 views

Exploit for Improper Input Validation in Redhat Keycloak

CVE-2021-3754 This repository documents Vulnerability details...

5.3CVSS7.6AI score0.02147EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2023/09/07 12:00 a.m.18 views

PT-2023-27989 · Unknown · Dairy Farm Shop Management System Using Php/Mysql

Name of the Vulnerable Software and Affected Versions: Dairy Farm Shop Management System Using PHP and MySQL version 1.1 Description: The Dairy Farm Shop Management System Using PHP and MySQL contains multiple SQL injection vulnerabilities in the Login function. These vulnerabilities are exploite...

7.5CVSS8.1AI score0.00963EPSS
SaveExploits1References9
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:00 a.m.44 views

Oracle Linux 8 : dovecot (ELSA-2019-3467)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3467 advisory. - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes...

9.8CVSS7AI score0.62579EPSS
SaveExploits2References2
Rows per page
Query Builder