Lucene search
+L

1471 matches found

OSV
OSV
added 2022/10/13 1:15 a.m.6 views

CVE-2022-34020

Cross Site Request Forgery CSRF vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 allows attackers to add new admin users to the platform or other unspecified impacts...

8.8CVSS5.8AI score0.00411EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/10/13 12:0 a.m.28 views

CVE-2022-41475

RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add an administrator account...

9AI score0.00378EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/10/13 12:0 a.m.5 views

CVE-2022-34020

Cross Site Request Forgery CSRF vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 allows attackers to add new admin users to the platform or other unspecified impacts...

8.8AI score0.00411EPSS
SaveExploits1References2
CloudLinux
CloudLinux
added 2022/10/10 6:56 p.m.51 views

Fixed CVEs in sqlite: CVE-2020-35525, CVE-2020-13435

CVE-2020-13435: add a code that tries to prevent a recurrence of problems - CVE-2020-35525: a potential null pointer dereference was fixed...

7.5CVSS3AI score0.00928EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/10/07 3:15 p.m.4 views

CVE-2022-39873

Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication...

4.6CVSS5.8AI score0.00239EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/10/07 12:0 a.m.30 views

CVE-2022-39873

Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication...

4.3CVSS4.9AI score0.00239EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/10/04 12:0 a.m.7 views

The vulnerability of the SAP NetWeaver Enterprise Portal software integration platform lies in the lack of security measures for the website structure, allowing attackers to view, add, modify, or delete data.

The vulnerability of the SAP NetWeaver Enterprise Portal software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to remotely view, add, modify, or delete data...

6.1CVSS6.3AI score0.00794EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/09/19 2:15 p.m.3 views

CVE-2022-3141

The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language via the settings page containing specific special characters, the backticks in the SQL query can be surpassed and a time-based blind payload can be injected...

8.8CVSS7.3AI score0.0408EPSS
SaveExploits5References5
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.7 views

PT-2022-20734 · WordPress · Translate Multilingual Sites

Name of the Vulnerable Software and Affected Versions: Translate Multilingual sites WordPress plugin versions prior to 2.3.3 Description: The issue allows for an authenticated SQL injection. This can be achieved by adding a new language via the settings page, containing specific special character...

8.8CVSS8.7AI score0.0408EPSS
SaveExploits5References8
OSV
OSV
added 2022/09/16 11:36 p.m.4 views

GSD-2022-1005181 block: don't allow the same type rq_qos add more than once

block: don't allow the same type rqqos add more than once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

7.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/09/02 12:15 p.m.6 views

CVE-2022-22102

Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto...

8.4CVSS7.1AI score0.00119EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/08/26 12:50 p.m.26 views

CVE-2021-39394

mm-wiki v0.2.1 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add user accounts and modify user information...

6.8AI score0.00287EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/08/26 12:0 a.m.8 views

mm-wiki 跨站请求伪造漏洞

mm-wiki is a Chinese phachon individual developers of a lightweight enterprise knowledge sharing and team collaboration software. It can be used to quickly build enterprise Wiki and team knowledge sharing platform. A security vulnerability exists in mm-wiki version v0.2.1, which originated from a...

6.5CVSS6.4AI score0.00287EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/24 4:15 p.m.5 views

CVE-2022-34837

Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add more network clients that may monitor various activities of the Zenon...

6.1CVSS6.4AI score0.0014EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/19 5:15 p.m.5 views

CVE-2022-36577

An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin...

8.8CVSS5.8AI score0.00357EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/19 5:15 p.m.6 views

CVE-2022-36577

An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin...

8.8CVSS7.3AI score0.00357EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/19 12:0 a.m.7 views

JIZHICMS 跨站请求伪造漏洞

JIZHICMS 極致网络科技 JIZHICMS is an open source content management system CMS from China JIZHICMS. version v2.3.1 of JIZHICMS has a security vulnerability that stems from the existence of a CSRF vulnerability that can add administrators. No detailed vulnerability details are available at this time...

8.8CVSS6.8AI score0.00357EPSS
SaveExploits1References2
NVD
NVD
added 2022/08/10 8:15 p.m.20 views

CVE-2021-40034

The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availability...

7.5CVSS0.00516EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/10 8:15 p.m.5 views

CVE-2021-40034

The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availability...

7.5CVSS7.2AI score0.00516EPSS
SaveExploits0References3Affected Software3
OSV
OSV
added 2022/08/10 8:15 p.m.6 views

CVE-2021-40034

The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availability...

7.5CVSS7.2AI score0.00516EPSS
SaveExploits0References2
Rows per page
Query Builder