Lucene search
+L

33 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.29 views

LAquis SCADA Web Server relatorionome TITULO Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to relatorionome.lhtml. When parsing the TITULO Element,...

7.5CVSS3.9AI score0.02155EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.21 views

LAquis SCADA LGX Report Edit Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS1.8AI score0.026EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.31 views

LAquis SCADA Web Server relatorioindividual TITULO Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to relatorioindividual.lhtml. When parsing the TITULO...

7.5CVSS4.3AI score0.01838EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.19 views

LAquis SCADA LGX Report MemoryReadLong Untrusted Pointer Dereference Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

5CVSS1.3AI score0.026EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.19 views

LAquis SCADA LGX Report Memory Free Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS2.6AI score0.026EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.41 views

LAquis SCADA LGX Report ShellExecute Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS2.3AI score0.026EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.27 views

LAquis SCADA LGX Report MemoryWriteDouble Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS2.2AI score0.026EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.30 views

LAquis SCADA Web Server relatorioindividual TAG Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to relatorioindividual.lhtml. When parsing the TAG...

7.5CVSS4.3AI score0.01838EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:00 a.m.31 views

LAquis SCADA Web Server relatorionome TAG Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to relatorionome.lhtml. When parsing the TAG Element, th...

7.5CVSS3.9AI score0.02155EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2018/03/19 1:16 a.m.13 views

aq-nrw.de XSS vulnerability

Open Bug Bounty ID: OBB-582373 Description| Value ---|--- Affected Website:| aq-nrw.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Prion
Prion
added 2011/07/20 10:55 p.m.22 views

Design/Logic Flaw

Unspecified vulnerability in the Streams, AQ & Replication Mgmt component in Oracle Database Server 10.1.0.5 and 10.2.0.3, and Oracle Enterprise Manager Grid Control 10.1.0.6, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

6.8CVSS8.2AI score0.02413EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
added 2011/07/20 12:00 a.m.58 views

Oracle Database Multiple Vulnerabilities (July 2011 CPU)

The remote Oracle database server is missing the July 2011 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Core RDBMS CVE-2011-0832, CVE-2011-0835, CVE-2011-0838, CVE-2011-0880, CVE-2011-2230, CVE-2011-2239, CVE-2011-2243,...

7.1CVSS5.6AI score0.02413EPSS
SaveExploits0References31
zdt
zdt
added 2008/10/31 12:00 a.m.47 views

SFS EZ Home Business Directory (cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== SFS EZ Home Business Directory catid SQL Injection Vulnerability =================================================================== Author : BeyazKurt LAHEY mahkemesini...

7.1AI score
SaveExploits0
Rows per page
Query Builder