Lucene search
+L

8767 matches found

Cvelist
Cvelist
added 2017/12/21 5:0 a.m.24 views

CVE-2017-17828

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...

5AI score0.00542EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2017/12/21 5:0 a.m.21 views

CVE-2017-17829

Bus Booking Script has SQL Injection via the admin/viewseatseller.php spid parameter or the admin/viewmember.php memid parameter...

7.6AI score0.01023EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2017/12/21 5:0 a.m.22 views

CVE-2017-17830

Bus Booking Script has CSRF via admin/newmaster.php...

6.7AI score0.0044EPSS
SaveExploits1References1
OSV
OSV
added 2017/12/20 6:29 p.m.7 views

CVE-2017-1694

IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165...

8.1CVSS5.8AI score0.00815EPSS
SaveExploits0References3
NVD
NVD
added 2017/12/20 6:29 p.m.27 views

CVE-2017-1694

IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165...

8.1CVSS7.6AI score0.00815EPSS
SaveExploits0References3
Prion
Prion
added 2017/12/20 6:29 p.m.16 views

Code injection

IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165...

4.3CVSS7.4AI score0.00815EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2017/12/20 6:0 p.m.53 views

CVE-2017-1694

IBM Integration Bus 9.0.x and 10.0.x are affected by CVE-2017-1694, where credentials are transmitted in clear text, enabling potential readout via MITM. Affected versions include IBM Integration Bus 9.0.0.0–9.0.0.9 and 10.0.0.0–10.0.0.9. The vulnerability can enable credential exposure during tr...

8.1CVSS7.5AI score0.00815EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2017/12/20 6:0 p.m.24 views

CVE-2017-1694

IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. IBM X-Force ID: 134165...

7.6AI score0.00815EPSS
SaveExploits0References3
CNVD
CNVD
added 2017/12/20 12:0 a.m.5 views

Bus Booking Script SQL Injection Vulnerability

Bus Booking Script is an online bus booking management system based on PHP and MySQL. A SQL injection vulnerability exists in Bus Booking Script version 1.0. The vulnerability can be exploited to inject SQL commands by sending the 'txtname' parameter to the admin/index.php file...

9.8CVSS8.4AI score0.0305EPSS
SaveExploits5References1
Prion
Prion
added 2017/12/18 9:29 a.m.16 views

Sql injection

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...

7.5CVSS9.8AI score0.0305EPSS
SaveExploits5References2Affected Software1
NVD
NVD
added 2017/12/18 9:29 a.m.24 views

CVE-2017-17645

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...

9.8CVSS9.9AI score0.0305EPSS
SaveExploits5References2
OSV
OSV
added 2017/12/18 9:29 a.m.4 views

CVE-2017-17645

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...

9.8CVSS5.8AI score0.0305EPSS
SaveExploits5References2
CVE
CVE
added 2017/12/18 9:0 a.m.57 views

CVE-2017-17645

CVE-2017-17645 affects Bus Booking Script 1.0. The vulnerability is a SQL Injection via the txtname parameter in admin/index.php, caused by unsanitized input in a PHP/MySQL-based web app. Public references (NVD, CNVD, CVE records) describe SQL injection as the issue, with in-the-wild PoCs/exploit...

9.8CVSS9.8AI score0.0305EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist
added 2017/12/18 9:0 a.m.27 views

CVE-2017-17645

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...

9.9AI score0.0305EPSS
SaveExploits5References2
CNVD
CNVD
added 2017/12/15 12:0 a.m.6 views

PHP Scripts Mall Entrepreneur Bus Booking Script SQL Injection Vulnerability

PHP Scripts Mall Entrepreneur Bus Booking Script is a PHP based online bus booking management system from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Entrepreneur Bus Booking Script version 3.0.4. The vulnerability can be exploited by a remote attacker to inje...

9.8CVSS8.4AI score0.0305EPSS
SaveExploits2References1
Metasploit
Metasploit
added 2017/12/14 3:23 p.m.64 views

Check For and Prep the Pyrotechnic Devices (Airbags, Battery Clamps, etc.)

Acting in the role of a Pyrotechnical Device Deployment Tool PDT, this module will first query all Pyrotechnic Control Units PCUs in the target vehicle to discover how many pyrotechnic devices are present, then attempt to validate the security access token using the default simplified algorithm. ...

4.7CVSS0.3AI score0.00994EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2017/12/14 12:0 a.m.9 views

The vulnerability of the usbhid_parse function in the Linux operating system’s kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the usbhidparse function in the Linux kernel’s drivers/hid/usbhid/hid-core.c file arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure or other adverse effects through a...

6.8CVSS6.7AI score0.00383EPSS
SaveExploits0References22Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/12/14 12:0 a.m.10 views

The vulnerability of the Linux operating system’s kernel allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the Linux operating system’s kernel drivers/usb/core/config.c arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or other effects by using a specially crafted USB device tha...

6.8CVSS6.8AI score0.00398EPSS
SaveExploits0References23Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/12/14 12:0 a.m.10 views

The vulnerability of the `snd_usb_create_streams` function in the Linux operating system allows a hacker to cause a service failure or exert other effects.

The vulnerability of the sndusbcreatestreams function in the Linux kernel stems from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or other effects through a specially crafted USB device...

6.8CVSS7.1AI score0.00398EPSS
SaveExploits0References22Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/12/14 12:0 a.m.8 views

The vulnerability of the cdc_parse_cdc_header function in the Linux operating system’s kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the cdcparsecdcheader function in the Linux kernel’s drivers/usb/core/message.c file arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure or other adverse effects through a...

7.2CVSS7.2AI score0.00422EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder