Lucene search
+L

1258 matches found

CVE
CVE
added 2023/04/18 2:31 p.m.66 views

CVE-2023-2155

SourceCodester Air Cargo Management System 1.0 contains a cross-site scripting vulnerability in file classes/Master.php?f=save_cargo_type. The issue arises from manipulation of the argument name (name) leading to XSS, with remote initiation and public disclosure of exploits. The CVE-2023-2155 ent...

4.8CVSS4.4AI score0.00551EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/18 2:31 p.m.12 views

CVE-2023-2155 SourceCodester Air Cargo Management System cross site scripting

A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file classes/Master.php?f=savecargotype. The manipulation of the argument name leads to cross site scripting. The attack can be initiate...

3.3CVSS5AI score0.00551EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/04/18 12:00 a.m.16 views

PT-2023-18283 · Sourcecodester · Sourcecodester Garage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Air Cargo Management System version 1.0 Description: A vulnerability was found in the SourceCodester Air Cargo Management System, affecting unknown code of the file classes/Master.php?f=save cargo type. The manipulation of the...

4.8CVSS4.2AI score0.00551EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/04/18 12:00 a.m.13 views

Air Cargo Management System 跨站脚本漏洞

Air Cargo Management System is an air cargo management system. A cross-site scripting vulnerability exists in SourceCodester Air Cargo Management System version 1.0, which stems from a problem with the file classes/Master.php?f=savecargotype, where manipulation of the parameter name can lead to...

4.8CVSS3.9AI score0.00551EPSS
SaveExploits1References4
vulnersOsv
vulnersOsv
added 2023/04/14 12:00 p.m.1 views

a2 (>=0.2.0, <=0.5.3), abacuz (>=0.1.0, <=0.1.1) +4552 more potentially affected by CVE-2023-26964 via h2 (>=0.1.26, <=0.3.12)

h2 CARGO version =0.1.26, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.1.0, =1.0.0, =0.1.0, =0.9.1 and more Source cves: CVE-2023-26964 Source advisory: OSV:RUSTSEC-2023-0034...

7.5CVSS7.1AI score0.01121EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2023/04/11 12:00 p.m.5 views

acari-lib (>=0.1.11, <=0.1.12), acme-rs (>=0.1.0, <=0.2.0) +304 more potentially affected by unknown CVE via multipart (>=0.3.1, <=0.18.0)

multipart CARGO version =0.3.1, =0.1.11, =0.1.0, =0.9.2, =0.2.0, =0.1.0, =0.0.1, =0.1.5, =0.0.1, =0.1.0, =1.0.0, =0.26.1, =0.4.4, =0.26.1 - authenticator 0.3.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0050...

5.4AI score
SaveExploits0
OSV
OSV
added 2023/04/05 8:15 a.m.6 views

CVE-2023-1856

A vulnerability has been found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/transactions/trackshipment.php of the component GET Parameter Handler. The manipulation of the argument id lea...

9.8CVSS6.5AI score
SaveExploits0References3
NVD
NVD
added 2023/04/05 8:15 a.m.31 views

CVE-2023-1856

A vulnerability has been found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/transactions/trackshipment.php of the component GET Parameter Handler. The manipulation of the argument id lea...

9.8CVSS7.4AI score0.00808EPSS
SaveExploits1References3
Prion
Prion
added 2023/04/05 8:15 a.m.33 views

Sql injection

A vulnerability has been found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/transactions/trackshipment.php of the component GET Parameter Handler. The manipulation of the argument id lea...

6.5CVSS9.7AI score0.00808EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/04/05 7:40 a.m.41 views

CVE-2023-1856 SourceCodester Air Cargo Management System GET Parameter track_shipment.php sql injection

A vulnerability has been found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/transactions/trackshipment.php of the component GET Parameter Handler. The manipulation of the argument id lea...

6.5CVSS10AI score0.00808EPSS
SaveExploits1References3
CVE
CVE
added 2023/04/05 7:40 a.m.57 views

CVE-2023-1856

CVE-2023-1856 affects SourceCodester Air Cargo Management System 1.0. The vulnerability lies in the GET Parameter Handler for /admin/transactions/track_shipment.php, where manipulating the id parameter leads to SQL injection. This can be triggered remotely and has been disclosed publicly. Connect...

9.8CVSS8.3AI score0.00808EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/04/05 12:00 a.m.13 views

Air Cargo Management System SQL注入漏洞

Air Cargo Management System is an air cargo management system. A SQL injection vulnerability exists in SourceCodester Air Cargo Management System version 1.0, which is caused by incorrect manipulation of the parameter id resulting in sql injection...

9.8CVSS7.2AI score0.00808EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/05 12:00 a.m.13 views

PT-2023-17287 · Sourcecodester · Sourcecodester Garage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Air Cargo Management System version 1.0 Description: A critical issue has been found in the SourceCodester Air Cargo Management System, affecting an unknown functionality of the file /admin/transactions/track shipment.php,...

9.8CVSS7.1AI score0.00808EPSS
SaveExploits1References5
NCSC
NCSC
added 2023/04/03 12:00 a.m.10 views

Vulnerabilities fixed in IBM Aspera Cargo and Connect

IBM has fixed vulnerabilities in Aspera Connect and Aspera Cargo. A local malicious party could exploit the vulnerabilities to cause a Buffer overflow. This usually leads to a Denial-of-Service, but can also lead to execution of arbitrary code on the system. The malicious party does not need prio...

9.8CVSS6.8AI score0.00656EPSS
SaveExploits0
NVD
NVD
added 2023/04/02 9:15 p.m.24 views

CVE-2023-27286

IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616...

9.8CVSS9.3AI score0.00656EPSS
SaveExploits0References2
OSV
OSV
added 2023/04/02 9:15 p.m.14 views

CVE-2023-27286

IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616...

9.8CVSS7.8AI score0.00656EPSS
SaveExploits0References2
OSV
OSV
added 2023/04/02 9:15 p.m.11 views

CVE-2023-27284

IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616...

9.8CVSS7.8AI score0.00656EPSS
SaveExploits0References2
Prion
Prion
added 2023/04/02 9:15 p.m.24 views

Buffer overflow

IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248616...

7.5CVSS9.4AI score0.00656EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2023/04/02 12:00 a.m.18 views

IBM Aspera 缓冲区错误漏洞

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. A code execution vulnerability exists in IBM Aspera Cargo and IBM Aspera Connect that originates from a boundary check error and can be exploited by an attack...

9.8CVSS8AI score0.00656EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/02 12:00 a.m.14 views

IBM Aspera 缓冲区错误漏洞

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. A code execution vulnerability exists in IBM Aspera Cargo and IBM Aspera Connect that originates from a boundary check error and can be exploited by an attack...

9.8CVSS8.2AI score0.00656EPSS
SaveExploits0References3
Rows per page
Query Builder