Lucene search
+L

894 matches found

SUSE CVE
SUSE CVE
added 2024/08/18 2:02 a.m.6 views

SUSE CVE-2024-42272

In the Linux kernel, the following vulnerability has been resolved: sched: actct: take care of padding in struct zoneshtkey Blamed commit increased lookup key size from 2 bytes to 16 bytes, because zoneshtkey got a struct net pointer. Make sure rhashtablelookup is not using the padding bytes whic...

5.8CVSS6.2AI score0.00241EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/17 9:15 a.m.10 views

AZL-49749 CVE-2024-42272 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: sched: actct: take care of padding in struct zoneshtkey Blamed commit increased lookup key size from 2 bytes to 16 bytes, because zoneshtkey got a struct net pointer. Make sure rhashtablelookup is not using the padding bytes whic...

5.5CVSS6.3AI score0.00241EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/12 1:38 p.m.11 views

CVE-2024-7641

A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown function of the file deactivateact.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

9.8CVSS5.7AI score0.00941EPSS
SaveExploits1References4
OSV
OSV
added 2024/08/12 1:38 p.m.9 views

CVE-2024-7642

A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file activateact.php. The manipulation of the argument id leads to sql injection. The attack can be...

9.8CVSS5.8AI score0.00953EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/08/12 12:00 a.m.11 views

SourceCodester Kortex Lite Advocate Office Management System SQL注入漏洞

SourceCodester Kortex Lite Advocate Office Management System is an office management system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which stems from an SQL injection vulnerability in the id paramet...

9.8CVSS7.1AI score0.00953EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/08/12 12:00 a.m.10 views

SourceCodester Kortex Lite Advocate Office Management System 安全漏洞

SourceCodester Kortex Lite Advocate Office Management System is an office management system from SourceCodester, Inc. A security vulnerability exists in version 1.0 of the SourceCodester Kortex Lite Advocate Office Management System, which stems from an SQL injection vulnerability in the id...

9.8CVSS7AI score0.00941EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/08/12 12:00 a.m.10 views

SourceCodester Kortex Lite Advocate Office Management System SQL注入漏洞

SourceCodester Kortex Lite Advocate Office Management System is an office management system from SourceCodester, Inc. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Kortex Lite Advocate Office Management System, which stems from an SQL injection vulnerability in the id...

9.8CVSS7AI score0.00953EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/08/09 12:00 a.m.9 views

PT-2024-38471 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue was found in the system, affecting the delete act.php file. The manipulation of the id argument leads to SQL injection. This issue can be...

9.8CVSS7.9AI score0.00953EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/07/31 12:00 a.m.9 views

The vulnerability of the /control/add_act.php file of the Kortex Lite Advocate Office Management System allows a perpetrator to execute arbitrary SQL commands.

The vulnerability of the /control/addact.php file of the Kortex Lite Advocate Office Management System lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands via the MULTIPART aname parameter...

6.5CVSS7.1AI score0.00578EPSS
SaveExploits0References4Affected Software1
Wired Threat Level
Wired Threat Level
added 2024/07/30 2:20 p.m.26 views

A Senate Bill Would Radically Improve Voting Machine Security

This year’s Intelligence Authorization Act would mandate penetration testing for federally certified voting machines and allow independent researchers to work on exposing vulnerabilities...

7.4AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2024/07/24 3:25 p.m.11 views

Robot Dog Internet Jammer

Supposedly the DHS has these: The robot, called "NEO," is a modified version of the "Quadruped Unmanned Ground Vehicle" Q-UGV sold to law enforcement by a company called Ghost Robotics. Benjamine Huffman, the director of DHSs Federal Law Enforcement Training Centers FLETC, told police at the 2024...

7.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2024/07/24 2:03 p.m.13 views

kernel: net/sched: act_mirred: don't override retval if we already lost the skb

A use-after-free flaw was found in net/sched/actmirred.c in the Linux kernel. This may result in a crash...

7.8CVSS7.2AI score0.00278EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/07/24 1:20 p.m.10 views

kernel: net/sched: act_mirred: don't override retval if we already lost the skb

A use-after-free flaw was found in net/sched/actmirred.c in the Linux kernel. This may result in a crash...

7.8CVSS7.2AI score0.00278EPSS
SaveExploits0References5
The Hacker News
The Hacker News
added 2024/07/23 9:37 a.m.16 views

Meta Given Deadline to Address E.U. Concerns Over 'Pay or Consent' Model

Meta has been given time till September 1, 2024, to respond to concerns raised by the European Commission over its "pay or consent" advertising model or risk-facing enforcement measures, including sanctions. The European Commission said the Consumer Protection Cooperation CPC Network has notified...

6.5AI score
SaveExploits0
NVD
NVD
added 2024/07/22 10:15 p.m.30 views

CVE-2024-24507

Cross Site Scripting vulnerability in Act-On 2023 allows a remote attacker to execute arbitrary code via the newUser parameter in the login.jsp component...

6.1CVSS0.00418EPSS
SaveExploits1References1
OSV
OSV
added 2024/07/22 10:15 p.m.9 views

CVE-2024-24507

Cross Site Scripting vulnerability in Act-On 2023 allows a remote attacker to execute arbitrary code via the newUser parameter in the login.jsp component...

6.1CVSS6.1AI score0.00418EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/07/22 12:00 a.m.12 views

CVE-2024-24507

Cross Site Scripting vulnerability in Act-On 2023 allows a remote attacker to execute arbitrary code via the newUser parameter in the login.jsp component...

7.3AI score0.00418EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/07/22 12:00 a.m.11 views

Act-On 安全漏洞

Act-On is an email marketing automation platform for businesses from Act-On, Inc. in the United States. A security vulnerability exists in Act-On version 2023. A remote attacker can exploit the vulnerability to execute arbitrary code via the newUser parameter in the login.jsp component...

6.1CVSS7.8AI score0.00418EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/07/22 12:00 a.m.34 views

CVE-2024-24507

Cross Site Scripting vulnerability in Act-On 2023 allows a remote attacker to execute arbitrary code via the newUser parameter in the login.jsp component...

0.00418EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/07/22 12:00 a.m.8 views

PT-2024-20427 · Act-On · Act-On

Name of the Vulnerable Software and Affected Versions: Act-On version 2023 Description: The issue allows a remote attacker to execute arbitrary code via the newUser parameter in the "login.jsp" component. This enables the attacker to perform Cross Site Scripting attacks. Recommendations: For Act-...

6.1CVSS7.6AI score0.00418EPSS
SaveExploits1References5
Rows per page
Query Builder