Lucene search
+L

455 matches found

CNVD
CNVD
•added 2025/04/09 12:00 a.m.•14 views

Patient Record Management System xray_print.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the parameter itrno of the xrayprint.php file. The vulnerability ca...

7.5CVSS8.2AI score0.00461EPSS
SaveExploits1References1
OSV
OSV
•added 2025/04/04 5:15 a.m.•19 views

CVE-2025-3208

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /xrayprint.php. The manipulation of the argument itrno leads to sql injection. It is possible to launch the attack remotely. The exploit...

7.5CVSS5.8AI score0.00461EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/02/05 11:41 p.m.•18 views

CVE-2022-41958

super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit 4d0d5966 and will be...

7.8CVSS6.2AI score0.00442EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/04/04 12:00 a.m.•16 views

MT Safeline X-Ray X3310 安全漏洞

MT Safeline X-Ray X3310 is an application from MT Safeline, Inc. A security vulnerability exists in MT Safeline X-Ray X3310 version 19.05. A remote attacker can exploit the vulnerability to execute JavaScript code and obtain sensitive information from the victim's browser...

5.4CVSS6.7AI score0.00432EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/09/18 4:15 p.m.•11 views

CVE-2023-41595

An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...

7.5CVSS7.1AI score0.00549EPSS
SaveExploits0References4
OSV
OSV
•added 2023/09/18 4:15 p.m.•12 views

CVE-2023-41595

An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...

7.5CVSS5.8AI score0.00549EPSS
SaveExploits0References3
NVD
NVD
•added 2023/09/18 4:15 p.m.•45 views

CVE-2023-41595

An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...

7.5CVSS7.3AI score0.00549EPSS
SaveExploits0References2
Prion
Prion
•added 2023/09/18 4:15 p.m.•49 views

Default credentials

An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...

5CVSS7.2AI score0.00549EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/18 12:00 a.m.•5 views

CVE-2023-41595: Use of Hard-coded Credentials

An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...

7.5CVSS7.3AI score0.00549EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/09/18 12:00 a.m.•20 views

CVE-2023-41595

An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...

6.4AI score0.00549EPSS
SaveExploits0References2
CVE
CVE
•added 2023/09/18 12:00 a.m.•103 views

CVE-2023-41595

The CVE refers to xui-xray v1.8.3 where a default password enables an attacker to obtain sensitive information. Affected software/component: xui-xray 1.8.3. Root cause: use of a default credential, allowing unauthorized access to sensitive data. Impact: information disclosure with high severity (...

7.5CVSS7.2AI score0.00549EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/09/18 12:00 a.m.•31 views

PT-2023-27990 · Xui-Xray · Xui-Xray

Name of the Vulnerable Software and Affected Versions: xui-xray version 1.8.3 Description: An issue in the software allows attackers to obtain sensitive information via a default password. Recommendations: For xui-xray version 1.8.3, change the default password to a unique and secure password to...

7.5CVSS7.3AI score0.00549EPSS
SaveExploits0References6
Drupal
Drupal
•added 2023/03/29 12:00 a.m.•24 views

Xray Audit - Moderately critical - Cross site scripting - SA-CONTRIB-2023-012

This module is a tool for developers, analysts, and administrators that allows them to generate reports on a given Drupal installation. The module does not sufficiently sanitize some data presented in its reports. This vulnerability is mitigated by the fact that an attacker must have a role with...

6.5AI score
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 4:46 a.m.•7 views

SUSE CVE-2017-7820

The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects...

5.3CVSS8.6AI score0.01188EPSS
SaveExploits1References4
CNVD
CNVD
•added 2022/11/29 12:00 a.m.•98 views

Super Xray Code Issue Vulnerability

Super Xray is an excellent vulnerability scanning tool by 4ra1n individual developers. A code issue exists in versions of Super Xray prior to 0.7, which stems from a program configuration that confirms that trusted inputs will be stored in a yaml file, which can be exploited by an attacker with...

7.8CVSS7.6AI score0.00442EPSS
SaveExploits1References1
NVD
NVD
•added 2022/11/25 6:15 p.m.•42 views

CVE-2022-41958

super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit 4d0d5966 and will be...

7.8CVSS0.00442EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/11/25 12:00 a.m.•11 views

PT-2022-26183 · Unknown · Super-Xray

Name of the Vulnerable Software and Affected Versions: super-xray versions prior to 0.7 Description: The issue concerns a web vulnerability scanning tool that assumed trusted input for the program config stored in a yaml file. An attacker with local access to the file could exploit this and...

7.8CVSS7.2AI score0.00442EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2022/11/25 12:00 a.m.•49 views

CVE-2022-41958 Deserialization Vulnerability by yaml config input in super-xray

super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit 4d0d5966 and will be...

7.3CVSS7.6AI score0.00442EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/11/25 12:00 a.m.•14 views

Super Xray 代码问题漏洞

Super Xray is an excellent vulnerability scanning tool by 4ra1n individual developers. A code issue exists in versions of Super Xray prior to 0.7, which stems from a program configuration that confirms that trusted inputs will be stored in a yaml file, which can be exploited by an attacker with...

7.8CVSS6.6AI score0.00442EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/25 12:00 a.m.•1 views

CVE-2022-41958: Deserialization of Untrusted Data

super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit 4d0d5966 and will be...

7.8CVSS5.7AI score0.00442EPSS
SaveExploits1References2
Rows per page
Query Builder