Lucene search
+L

39 matches found

OSV
OSV
added 2024/07/30 9:15 a.m.5 views

CVE-2024-7226

A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=saveuser of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attac...

8.8CVSS4.7AI score0.00402EPSS
SaveExploits1References4
NVD
NVD
added 2024/07/30 9:15 a.m.37 views

CVE-2024-7226

A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=saveuser of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attac...

8.8CVSS0.00402EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/07/30 9:0 a.m.15 views

CVE-2024-7226 SourceCodester Medicine Tracker System Password Change cross-site request forgery

A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=saveuser of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attac...

6.9CVSS7.2AI score0.00402EPSS
SaveExploits1References4
CVE
CVE
added 2024/07/30 9:0 a.m.53 views

CVE-2024-7226

CVE-2024-7226 refers to a cross-site request forgery in SourceCodester Medicine Tracker System 1.0, affecting the code path /classes/Users.php?f=save_user within the Password Change Handler. The vulnerability is triggered remotely and can be exploited after a user visit, with the exploit reported...

8.8CVSS7.2AI score0.00402EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2024/07/28 4:15 p.m.47 views

CVE-2024-7161

A vulnerability classified as problematic was found in SeaCMS 13.0. Affected by this vulnerability is an unknown functionality of the file /member.php?action=chgpwdsubmit of the component Password Change Handler. The manipulation of the argument newpwd/newpwd2 leads to cross-site request forgery...

6.9CVSS0.00338EPSS
SaveExploits1References4
OSV
OSV
added 2024/07/28 4:15 p.m.7 views

CVE-2024-7161

A vulnerability classified as problematic was found in SeaCMS 13.0. Affected by this vulnerability is an unknown functionality of the file /member.php?action=chgpwdsubmit of the component Password Change Handler. The manipulation of the argument newpwd/newpwd2 leads to cross-site request forgery...

6.5CVSS4.7AI score0.00338EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/07/28 12:0 a.m.7 views

PT-2024-38123 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.0 Description: A problematic issue was found in the Password Change Handler component, specifically in the /member.php?action=chgpwdsubmit file. The manipulation of the newpwd and newpwd2 arguments leads to cross-site reques...

6.9CVSS4.9AI score0.00338EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
added 2024/06/19 1:45 p.m.24 views

CVE-2024-38595 net/mlx5: Fix peer devlink set for SF representor devlink port

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix peer devlink set for SF representor devlink port The cited patch change register devlink flow, and neglect to reflect the changes for peer devlink set logic. Peer devlink set is triggering a call trace if done after...

6.6AI score0.00211EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/03/15 7:0 a.m.44 views

CVE-2024-2483 Surya2Developer Hostel Management Service Password Change change-password.php cross-site request forgery

A vulnerability, which was classified as problematic, has been found in Surya2Developer Hostel Management Service 1.0. This issue affects some unknown processing of the file /change-password.php of the component Password Change Handler. The manipulation of the argument oldpassword leads to...

5CVSS5.1AI score0.00272EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/15 12:0 a.m.10 views

PT-2024-20596 · Unknown · Surya2Developer Hostel Management Service

Name of the Vulnerable Software and Affected Versions: Surya2Developer Hostel Management Service version 1.0 Description: A problematic issue has been found in the Password Change Handler component, specifically affecting the /change-password.php file. The manipulation of the oldpassword argument...

5CVSS7.1AI score0.00272EPSS
SaveExploits0References6
NVD
NVD
added 2023/07/19 6:15 a.m.25 views

CVE-2023-3761

A vulnerability was found in Intergard SGS 8.7.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Password Change Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The...

7.5CVSS5.1AI score0.0049EPSS
SaveExploits0References3
OSV
OSV
added 2023/07/19 6:15 a.m.7 views

CVE-2023-3761

A vulnerability was found in Intergard SGS 8.7.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Password Change Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The...

7.5CVSS4.3AI score0.0049EPSS
SaveExploits0References3
CVE
CVE
added 2023/07/19 6:0 a.m.56 views

CVE-2023-3761

CVE-2023-3761 concerns Intergard SGS 8.7.0, specifically a vulnerability in the Password Change Handler that causes cleartext transmission of sensitive information. Exploitation is network-based and can be attempted remotely, with the attack having high impact on confidentiality and no impact on ...

7.5CVSS5.7AI score0.0049EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/07/19 6:0 a.m.39 views

CVE-2023-3761 Intergard SGS Password Change cleartext transmission

A vulnerability was found in Intergard SGS 8.7.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Password Change Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The...

3.7CVSS7.7AI score0.0049EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/19 12:0 a.m.10 views

PT-2023-7026 · Unknown · Intergard Sgs

Name of the Vulnerable Software and Affected Versions: Intergard SGS version 8.7.0 Description: A vulnerability was found in the Password Change Handler component, leading to cleartext transmission of sensitive information. The attack can be launched remotely, with a rather high complexity and...

7.8CVSS6.7AI score0.0049EPSS
SaveExploits0References9
Prion
Prion
added 2023/03/17 8:15 a.m.19 views

Authentication flaw

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=saveuser of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to...

6.4CVSS9.4AI score0.00971EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/17 7:51 a.m.48 views

CVE-2023-1460 SourceCodester Online Pizza Ordering System Password Change improper authentication

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=saveuser of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to...

6.5CVSS9.7AI score0.00971EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/03/17 12:0 a.m.18 views

PT-2023-16998 · Unknown · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue has been found in the Password Change Handler component, specifically affecting the file admin/ajax.php?action=save user. This leads to improper...

9.8CVSS6.9AI score0.00971EPSS
SaveExploits0References5
Veracode
Veracode
added 2019/05/02 6:10 a.m.23 views

Use After Free

Thunderbird, Firefox ESR, and Firefox are vulnerable to use-after-free vulnerability. Changing styles when manipulating DOM elements may cause the application to crash resulting in denial of service conditions. The affected component is Style Change Handler...

9.8CVSS9AI score0.06681EPSS
SaveExploits3References17Affected Software2
Rows per page
Query Builder