Lucene search
K

6 matches found

Positive Technologies
Positive Technologies
added 2026/02/06 12:0 a.m.8 views

PT-2026-6814

Name of the Vulnerable Software and Affected Versions Business Live Chat Software version 1.0 Description The software contains a cross-site request forgery condition that permits attackers to alter user account roles without needing to authenticate. An attacker can create a malicious HTML form t...

5.3CVSS5.3AI score0.00181EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2002-0546

Malware in sbrugna...

7.5CVSS6.4AI score0.03604EPSS
Exploits0References4
OSV
OSV
added 2025/02/26 7:0 a.m.3 views

UBUNTU-CVE-2022-49099

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix initialization of device object in vmbusdeviceregister Initialize the device's dmamask,parms pointers and the device's dmamask value before invoking deviceregister. Address the following trace with 5.17-rc...

5.5CVSS6.5AI score0.00197EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.27 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the dmamask and dmaparms of the device object in the vmbusdeviceregister function not being properly...

5.5CVSS5.5AI score0.00197EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.3 views

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum, related to errors in controlling access parameters, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum is related to errors in controlling access parameters. Exploiting this vulnerability could allow a malicious actor to cause malfunctions through the use of the Telnet connection...

6.5CVSS5.5AI score0.01135EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2004/11/23 5:0 a.m.15 views

CVE-2004-0300

SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via 1 the cat parameter in shop.php, 2 the id parameter in more.php, 3 the catmanufacturer parameter in shopbybrand.php, or 4 the id parameter in listing.php...

10CVSS7.8AI score0.0517EPSS
Exploits1References9
Rows per page
Query Builder