Lucene search
+L

5246 matches found

OSV
OSV
added 2024/03/18 2:15 p.m.10 views

CVE-2024-2597

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through /amssplus/modules/book/main/bookdetailschoolperson.php, in the 'bid' parameter. This vulnerability could allow a remote attacker to send a...

6.1CVSS5.8AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/18 12:00 a.m.12 views

PT-2024-21239 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue is related to insufficient encoding of user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through the "/amssplus/modules/book/main/bookdetail khet person.php" API endpoint,...

7.1CVSS5.8AI score0.00403EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/03/18 12:00 a.m.12 views

PT-2024-21245 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue is related to insufficient encoding of user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited through the...

7.1CVSS5.8AI score0.00411EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/18 12:00 a.m.8 views

AMSS++ Cross-Site Scripting Vulnerability

AMSS++ is a tool for office management support systems from Amssplus. A cross-site scripting vulnerability exists in AMSS++ version 4.31, which stems from a cross-site scripting vulnerability in the bid parameter of the /amssplus/modules/book/main/bookdetailgroup.php page...

7.1CVSS6.2AI score0.0042EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/18 12:00 a.m.13 views

PT-2024-21223 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue is related to insufficient encoding of user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited through the...

7.1CVSS5.8AI score0.0042EPSS
SaveExploits0References5
Openbugbounty
Openbugbounty
added 2024/03/15 11:53 a.m.6 views

b-seminar.ru Cross Site Scripting vulnerability OBB-3873642

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/03/12 12:00 a.m.22 views

CVE-2024-25331

DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution RCE vulnerability elevated from HNAP Stack-Based Buffer Overflow...

7.6AI score0.00334EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/03/06 12:00 a.m.14 views

Delta Electronics CNCSoft-B Stack Buffer Overflow Vulnerability

Delta Electronics CNCSoft-B is a CNC machine simulation system software from Delta Electronics Taiwan, China. A stack buffer overflow vulnerability exists in Delta Electronics CNCSoft-B, which can be exploited by an attacker to execute arbitrary code because the program fails to properly validate...

7.8CVSS7.9AI score0.00739EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/04 12:00 a.m.23 views

Delta Electronics CNCSoft-B DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00739EPSS
SaveExploits0References1
Exploit DB
Exploit DB
added 2024/03/03 12:00 a.m.334 views

Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated)

Exploit Title: Maxima Max Pro Power - BLE Traffic Replay Unauthenticated Date: 13-Nov-2023 Exploit Author: Alok kumar [email protected], Cyberpwn Technologies Pvt. Ltd. Vendor Homepage: https://www.maximawatches.com Product Link: https://www.maximawatches.com/products/max-pro-power Firmware...

4.3CVSS5AI score0.00511EPSS
SaveExploits4
Openbugbounty
Openbugbounty
added 2024/03/01 8:20 p.m.5 views

binnenste-b-uiten.nl Improper Access Control vulnerability OBB-3862953

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
OSV
OSV
added 2024/03/01 1:15 a.m.10 views

CVE-2024-1941

Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00739EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/01 1:15 a.m.32 views

CVE-2024-1941

Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00739EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/01 1:15 a.m.24 views

Stack overflow

Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

4.4CVSS7.9AI score0.00739EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/01 12:17 a.m.11 views

CVE-2024-1941 Delta Electronics CNCSoft-B Stack-based Buffer Overflow

Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00739EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/01 12:17 a.m.109 views

CVE-2024-1941

Delta Electronics CNCSoft-B is affected by CVE-2024-1941: stack-based buffer overflow in CNCSoft-B versions 1.0.0.4 and prior that can allow arbitrary code execution. Affected component is the CNCSoft-B software itself; root cause is a stack-based overflow due to input length validation failures....

7.8CVSS7.9AI score0.00739EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/01 12:17 a.m.40 views

CVE-2024-1941 Delta Electronics CNCSoft-B Stack-based Buffer Overflow

Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00739EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/01 12:00 a.m.12 views

Delta Electronics CNCSoft 安全漏洞

Delta Electronics CNCSoft-B is a CNC machine simulation system software from Delta Electronics Taiwan, China. A stack buffer overflow vulnerability exists in Delta Electronics CNCSoft-B, which can be exploited by an attacker to execute arbitrary code because the program fails to properly validate...

7.8CVSS8AI score0.00739EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/29 8:15 p.m.9 views

CVE-2024-1595

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed...

7.8CVSS5.8AI score0.0039EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/29 8:15 p.m.36 views

CVE-2024-1595

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References1
Rows per page
Query Builder