Lucene search
+L

444 matches found

OSV
OSV
added 2022/04/12 5:15 p.m.9 views

CVE-2022-27669

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

7.5CVSS5.8AI score0.01001EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/12 5:15 p.m.23 views

CVE-2022-27669

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

7.5CVSS0.01001EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/12 5:15 p.m.5 views

CVE-2022-27669

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

7.5CVSS5.8AI score0.01001EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2022/04/12 5:15 p.m.27 views

Design/Logic Flaw

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

5CVSS7.8AI score0.01001EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/04/12 4:11 p.m.95 views

CVE-2022-27669

CVE-2022-27669 concerns SAP NetWeaver Application Server for Java 7.50, where an unauthenticated user can abuse the XML Data Archiving Service due to a lack of authentication checks, potentially causing privilege escalation. Multiple connected sources (Red Hat, CNVD, CVE listing, and NCSC overvie...

7.5CVSS7.8AI score0.01001EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/12 4:11 p.m.28 views

CVE-2022-27669

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

8AI score0.01001EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/04/12 12:00 a.m.10 views

SAP NetWeaver Application Server 安全漏洞

SAP NetWeaver Application Server is an application server from SAP Germany. SAP NetWeaver Application Server elevation of privilege vulnerability, which stems from a lack of authentication checks in the XML data archiving service, can be exploited by an attacker to cause an elevation of privilege...

7.5CVSS7.8AI score0.01001EPSS
SaveExploits0References4
OSV
OSV
added 2022/04/01 11:15 p.m.10 views

CVE-2021-33024

Philips Vue PACS versions 12.2.x.x and prior transmits or stores authentication credentials, but it uses an insecure method susceptible to unauthorized interception and/or retrieval...

7.5CVSS7.3AI score0.00896EPSS
SaveExploits0References2
CVE
CVE
added 2022/03/15 2:35 p.m.96 views

CVE-2022-24755

CVE-2022-24755 affects Bareos Director when built/configured for PAM: authorization checks were skipped, allowing login with expired accounts or passwords. Affected versions are Bareos Director >= 18.2 but before 21.1.0, 20.0.6, and 19.2.12. The root cause is missing authorization checks (circ...

9.8CVSS9.1AI score0.02027EPSS
SaveExploits1References5Affected Software1
Microsoft Secure
Microsoft Secure
added 2022/01/28 6:00 p.m.24 views

Gartner® names Microsoft a Leader in the 2022 Magic Quadrant™ for Enterprise Information Archiving

With data doubling every two years, it is more critical than ever to have simple and integrated tools to understand and manage risks to an organization. As more people work remotely, users collaborate and store data in different locations. These secular trends offer new possibilities in how work...

0.2AI score
SaveExploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2022/01/28 6:00 p.m.27 views

Gartner® names Microsoft a Leader in the 2022 Magic Quadrant™ for Enterprise Information Archiving

With data doubling every two years, it is more critical than ever to have simple and integrated tools to understand and manage risks to an organization. As more people work remotely, users collaborate and store data in different locations. These secular trends offer new possibilities in how work...

0.2AI score
SaveExploits0
CNVD
CNVD
added 2022/01/14 12:00 a.m.45 views

Sourcecodester Online Thesis Archiving System SQL Injection Vulnerability

Online Thesis Archiving System is Sourcecodester open source provides an online platform to store students' theses or capstone projects. sourcecodester Online Thesis Archiving System is vulnerable to SQL injection in v1.0, which stems from a lack of validation of externally entered SQL statements...

9.8CVSS2.9AI score0.02761EPSS
SaveExploits1References1
OSV
OSV
added 2022/01/10 2:10 p.m.15 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

9.8CVSS5.8AI score0.02761EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:10 p.m.8 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

9.8CVSS7.5AI score0.02761EPSS
SaveExploits1References5
NVD
NVD
added 2022/01/10 2:10 p.m.34 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

9.8CVSS0.02761EPSS
SaveExploits1References4
Prion
Prion
added 2022/01/10 2:10 p.m.23 views

Sql injection

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

7.5CVSS10AI score0.02761EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.18 views

Online Thesis Archiving System SQL注入漏洞

Online Thesis Archiving System is Sourcecodester open source provides an online platform to store students' theses or capstone projects. sourcecodester Online Thesis Archiving System is vulnerable to SQL injection in v1.0, which stems from a lack of validation of externally entered SQL statements...

9.8CVSS6.1AI score0.02761EPSS
SaveExploits1References5
CVE
CVE
added 2022/01/09 6:57 p.m.67 views

CVE-2021-45334

CVE-2021-45334 affects Sourcecodester Online Thesis Archiving System 1.0. Multiple connected sources describe a SQL Injection vulnerability in this product, caused by insufficient validation of externally supplied SQL statements in the application. The vulnerability can enable bypass of admin aut...

9.8CVSS10AI score0.02761EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2022/01/09 6:57 p.m.38 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

10AI score0.02761EPSS
SaveExploits1References4
zdt
zdt
added 2021/12/14 12:00 a.m.292 views

Online Thesis Archiving System 1.0 - SQL injection Authentication Bypass Vulnerability

Exploit Title: Online Thesis Archiving System 1.0 - SQLi Authentication Bypass Exploit Author: Yehia Elghaly YME Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15083/online-thesis-archiving-system-using-phpoop-free-source-code.html Version: Onli...

0.6AI score
SaveExploits0
Rows per page
Query Builder