Lucene search
+L

304 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/03 12:00 a.m.•3 views

CVE-2022-4277: Improper Neutralization

A vulnerability was found in Shaoxing Background Management System. It has been declared as critical. This vulnerability affects unknown code of the file /Default/Bd. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

9.8CVSS5.5AI score0.0069EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/12/03 12:00 a.m.•37 views

CVE-2022-4277 Shaoxing Background Management System Bd sql injection

A vulnerability was found in Shaoxing Background Management System. It has been declared as critical. This vulnerability affects unknown code of the file /Default/Bd. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

6.3CVSS9.9AI score0.0069EPSS
SaveExploits1References2
ICS
ICS
•added 2022/12/01 12:00 a.m.•29 views

BD BodyGuard Pumps

1. EXECUTIVE SUMMARY CVSS v3 5.3 Vendor: Becton, Dickinson and Company BD Equipment: BodyGuard Pumps Vulnerability: Missing Protection Mechanism for Alternate Hardware Interface 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to change configuration...

5.3CVSS5.4AI score0.00224EPSS
SaveExploits0References4
CVE
CVE
•added 2022/11/04 6:58 p.m.•86 views

CVE-2022-40263

BD Totalys MultiProcessor (versions 1.70 and earlier) is affected by a hard-coded credentials vulnerability. Exploitation would require local access (or physical access if networked) to the system, with low attack complexity and user interaction not needed. Successful exploitation could allow an ...

7.8CVSS6.8AI score0.00166EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/04 12:00 a.m.•4 views

CVE-2022-40263: Use of Hard-coded Credentials

BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information ePHI, protected health information PHI and personally identifiable...

7.8CVSS7.1AI score0.00166EPSS
SaveExploits0References3
NVD
NVD
•added 2022/10/19 10:15 p.m.•29 views

CVE-2022-41691

When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate...

7.5CVSS0.0067EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/19 10:15 p.m.•25 views

Code injection

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate...

5CVSS7.5AI score0.0067EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2022/10/19 9:25 p.m.•16 views

CVE-2022-41836 BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate...

7.5CVSS7.5AI score0.0067EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/10/19 9:25 p.m.•34 views

CVE-2022-41836 BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate...

7.5CVSS7.7AI score0.0067EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/10/19 9:19 p.m.•42 views

CVE-2022-41691 BIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691

When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate...

7.5CVSS7.7AI score0.0067EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/10/19 9:19 p.m.•8 views

CVE-2022-41691 BIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691

When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate...

7.5CVSS7.5AI score0.0067EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/10/19 12:00 a.m.•15 views

F5 BIG-IP 输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 Corporation that integrates network traffic management, application security management, load balancing and other features. The F5 BIG-IP suffers from an input validation error vulnerability that originates from an undisclosed request that cou...

7.5CVSS7.3AI score0.0067EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/19 12:00 a.m.•3 views

CVE-2022-41836: Improper Input Validation

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate...

7.5CVSS7.2AI score0.0067EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/10/19 12:00 a.m.•44 views

F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM bd vulnerability (K02694732)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.2. It is, therefore, affected by a vulnerability as referenced in the K02694732 advisory. - When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd...

7.5CVSS7.4AI score0.0067EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/10/19 12:00 a.m.•3 views

CVE-2022-43043

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function BDCheckSFTimeOffset at /bifs/fielddecode.c...

5.5AI score0.00279EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/19 12:00 a.m.•2 views

CVE-2022-41691: Release of Invalid Pointer or Reference

When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate...

7.5CVSS7.2AI score0.0067EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/10/19 12:00 a.m.•35 views

F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM bd vulnerability (K47204506)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.7 / 16.1.3.1 / 17.0.0.1 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K47204506 advisory. - When an 'Attack Signature False Positive Mode' enabled security policy is configured on a...

7.5CVSS7.4AI score0.0067EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2022/10/04 9:57 p.m.•12 views

bd-cine.com Cross Site Scripting vulnerability OBB-2977427

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
ICS
ICS
•added 2022/10/04 12:00 a.m.•60 views

BD Totalys MultiProcessor

1. EXECUTIVE SUMMARY CVSS v3 6.6 ATTENTION: Low attack complexity Vendor: Becton, Dickinson and Company BD Equipment: Totalys MultiProcessor Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access, modify, or...

7.8CVSS6.9AI score0.00166EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/10/04 12:00 a.m.•10 views

BD Totalys MultiProcessor 信任管理问题漏洞

The BD Totalys MultiProcessor is a medical device from Bidi Medical BD, USA. combines full automation of the cell enrichment process for cervical samples, a strict chain of custody, and customizable small samples for ancillary testing. The BD Totalys MultiProcessor suffers from a trust management...

7.8CVSS7.4AI score0.00166EPSS
SaveExploits0References3
Rows per page
Query Builder