Lucene search
+L

805 matches found

NVD
NVD
•added 2024/01/23 11:15 a.m.•30 views

CVE-2024-22076

MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface...

9.8CVSS9.5AI score0.01142EPSS
SaveExploits0References3
Prion
Prion
•added 2024/01/23 11:15 a.m.•49 views

Information disclosure

MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface...

7.5CVSS9.4AI score0.01142EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/23 12:00 a.m.•1 views

CVE-2024-22076: Undefined Security Weakness

MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface...

9.8CVSS8.8AI score0.01142EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/01/23 12:00 a.m.•21 views

PT-2024-2633 · Unknown · Myq Print Server

Name of the Vulnerable Software and Affected Versions: MyQ Print Server versions prior to 8.2 patch 43 Description: The issue is related to the administrative interface of the MyQ Print Server, where remote authenticated administrators can execute arbitrary code via PHP scripts. This is due to...

9.8CVSS9.4AI score0.01142EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2024/01/23 12:00 a.m.•4 views

CVE-2024-22076

MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface...

8AI score0.01142EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/01/23 12:00 a.m.•34 views

CVE-2024-22076

MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface...

9.7AI score0.01142EPSS
SaveExploits0References3
Prion
Prion
•added 2023/12/05 8:15 a.m.•23 views

Authentication flaw

An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" SBC and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10R11.05.02. This allows an unauthenticat...

7.5CVSS8.1AI score0.01861EPSS
SaveExploits2References4Affected Software3
Cvelist
Cvelist
•added 2023/12/05 7:35 a.m.•42 views

CVE-2023-6269 Argument injection vulnerability in Atos Unify OpenScape Session Border Controller, Atos Unify OpenScape Branch and Atos Unify OpenScape BCF

An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" SBC and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10R11.05.02. This allows an unauthenticat...

10CVSS10AI score0.01861EPSS
SaveExploits2References4
Packet Storm
Packet Storm
•added 2023/10/09 12:00 a.m.•228 views

Chicv Management System Login 4.5.6 Insecure Direct Object Reference

==================================================================================================================================== | Title : Chicv Management System Login v4.5.6 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0....

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/10/02 12:00 a.m.•11 views

PT-2023-28077 · Wpgens · Swifty Bar

Name of the Vulnerable Software and Affected Versions: Swifty Bar, sticky bar by WPGens plugin versions = 1.2.10 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This allows for malicious scripts to be stored on th...

5.9CVSS5.2AI score0.00362EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/09/27 2:50 p.m.•44 views

CVE-2023-40046 WS_FTP Server SQL Injection via Administrative Interface

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a SQL injection vulnerability exists in the WSFTP Server manager interface. An attacker may be able to infer information about the structure and contents of the database and execute SQL statements that alter or delete database elements...

8.2CVSS9.2AI score0.01009EPSS
SaveExploits0References2
CISA KEV Catalog
CISA KEV Catalog
•added 2023/08/22 12:00 a.m.•158 views

Ivanti Sentry Authentication Bypass Vulnerability

Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration...

9.8CVSS9.1AI score0.9995EPSS
SaveIn wildExploits6
Prion
Prion
•added 2023/08/21 5:15 p.m.•68 views

Authentication flaw

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration...

7.5CVSS9.4AI score0.9995EPSS
SaveExploits6References2Affected Software1
attackerkb
attackerkb
•added 2023/08/21 12:00 a.m.•131 views

CVE-2023-38035

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration. Recent assessments: jheysel-r7 at...

9.8CVSS10AI score0.9995EPSS
SaveIn wildExploits6References3
Packet Storm
Packet Storm
•added 2023/08/21 12:00 a.m.•268 views

Fara Melk Estate CMS 1.5.0 Information Disclosure

==================================================================================================================================== | Title : Fara Melk Estate CMS v1.5.0 unauthorized administrative access Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser :...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2023/08/11 12:00 a.m.•398 views

helloGTX Travel Portal CRM 1.6 Insecure Direct Object Reference

==================================================================================================================================== | Title : helloGTX Travel Portal CRM v1.6 Insecure Direct Object Reference Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser ...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2023/08/04 12:00 a.m.•181 views

Web Stock 3.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : Web Stock v3.0 Unauthorised Administrative Access Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firef...

7.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2023/06/13 8:41 a.m.•47 views

CVE-2022-39946

An access control vulnerability CWE-284 in FortiNAC version 9.4.2 and below, version 9.2.7 and below, 9.1 all versions, 8.8 all versions, 8.7 all versions, 8.6 all versions, 8.5 all versions may allow a remote attacker authenticated on the administrative interface to perform unauthorized jsp call...

7.6CVSS7.6AI score0.00717EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/06/12 12:00 a.m.•29 views

Fortinet Fortigate Path traversal vulnerability in administrative interface (FG-IR-22-393)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-393 advisory. - A relative path traversal vulnerability CWE-23 in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9...

6.5CVSS5.2AI score0.00642EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/06/12 12:00 a.m.•1 views

PT-2023-3764

Name of the Vulnerable Software and Affected Versions FortiNAC versions 9.4.2 and below FortiNAC versions 9.2.7 and below FortiNAC version 9.1 and all prior versions FortiNAC versions 8.8 and all prior versions FortiNAC versions 8.7 and all prior versions FortiNAC versions 8.6 and all prior...

8CVSS0.00717EPSS
SaveExploits0References5
Rows per page
Query Builder