Lucene search
+L

70 matches found

Positive Technologies
Positive Technologies
added 2022/02/14 12:0 a.m.10 views

PT-2022-16538 · Unknown · Tongda2000

Name of the Vulnerable Software and Affected Versions: Tongda2000 version 11.10 Description: A SQL injection issue was found in the /mobile seal/get seal.php endpoint via the DEVICE LIST parameter. This allows for potential exploitation of the software. Recommendations: For Tongda2000 version...

9.8CVSS9.8AI score0.01213EPSS
SaveExploits1References4
CNVD
CNVD
added 2021/07/16 12:0 a.m.11 views

SQL Injection Vulnerability in Tongda OA Version 11.10 Server Side

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

7.5AI score
SaveExploits0
Prion
Prion
added 2020/11/16 1:15 a.m.40 views

Design/Logic Flaw

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportuni...

6.8CVSS8AI score0.01574EPSS
SaveExploits0References5Affected Software2
NCSC
NCSC
added 2020/11/16 12:0 a.m.4 views

Vulnerabilities fixed in PostgreSQL

Several vulnerabilities have been fixed in PostgreSQL. A local malicious person with limited privileges within the vulnerable PostgreSQL database, could potentially exploit the vulnerabilities to within the database or on the local system to execute arbitrary code execute arbitrary code with root...

8.8CVSS7.7AI score0.4644EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2020/06/17 12:0 a.m.24 views

Intel Active Management Technology Information Disclosure Vulnerability (INTEL-SA-00295)

Intel Active Management Technology AMT is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

5.3CVSS5.3AI score0.01646EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2020/03/10 3:15 p.m.27 views

CVE-2019-13004

An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. When specific encoded characters were added to comments, the comments section would become inaccessible. It has Incorrect Access Control issue 1 of 2...

5.3CVSS6.1AI score0.01107EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/03/10 2:54 p.m.27 views

CVE-2019-13004

An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. When specific encoded characters were added to comments, the comments section would become inaccessible. It has Incorrect Access Control issue 1 of 2...

5.4AI score0.01107EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/09/03 12:0 a.m.6 views

GitLab HTML Injection Vulnerability (CNVD-2019-31316)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An HTML injection vulnerability exists in GitLab Enterpri...

6.1CVSS7.1AI score0.01225EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/08 12:0 a.m.5 views

GitLab Information Disclosure Vulnerability (CNVD-2019-25496)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

4.3CVSS6.1AI score0.00964EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2011/07/05 12:0 a.m.38 views

Opera < 11.10 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.10 and thus is potentially affected by the following vulnerabilities : - An unspecified vulnerability allows remote attackers to hijack searches and customizations using unspecified third-party applications. CVE-2011-263...

5CVSS5.8AI score0.02258EPSS
SaveExploits0References8
Rows per page
Query Builder