Lucene search
K

303 matches found

OSV
OSV
added 2024/10/20 3:15 a.m.3 views

CVE-2024-10166

A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file checkuser.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.8AI score0.00663EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/10/20 12:0 a.m.3 views

Codezips Sales Management System SQL注入漏洞

Codezips Sales Management System is a Codezips open source sales management system. A SQL injection vulnerability exists in Codezips Sales Management System version 1.0, which originates from the parameter name in the file checkuser.php that can lead to SQL injection...

9.8CVSS7.8AI score0.00663EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/10/19 12:0 a.m.2 views

PT-2024-16079 · Unknown · Codezips Sales Management System

Name of the Vulnerable Software and Affected Versions: Codezips Sales Management System version 1.0 Description: A critical issue has been found in the Codezips Sales Management System, affecting some unknown functionality of the file checkuser.php. The manipulation of the argument name leads to...

9.8CVSS8.1AI score0.00663EPSS
Exploits1References10
OSV
OSV
added 2024/09/22 1:15 a.m.16 views

CVE-2024-47221

CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password...

7.5CVSS6.9AI score
Exploits0References1
NVD
NVD
added 2024/09/22 1:15 a.m.16 views

CVE-2024-47221

CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password...

7.5CVSS0.00341EPSS
Exploits0References1
CVE
CVE
added 2024/09/22 12:0 a.m.57 views

CVE-2024-47221

Rapid SCADA vulnerability CVE-2024-47221 affects Rapid SCADA versions up to 5.8.4, where CheckUser in ScadaServerEngine/MainLogic.cs permits an empty password. This can enable authentication with no credentials, potentially allowing unauthorized access. The CVSS 3.1 vector indicates Network attac...

7.5CVSS7AI score0.00341EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/09/22 12:0 a.m.19 views

CVE-2024-47221

CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password...

0.00341EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/22 12:0 a.m.11 views

CVE-2024-47221

CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password...

6.9AI score0.00341EPSS
Exploits0References1
OSV
OSV
added 2024/07/10 7:26 a.m.14 views

BIT-MEDIAWIKI-2024-40596

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The Special:Investigate feature can expose suppressed information for log events. TimelineService does not support properly suppressing...

4.3CVSS4.5AI score0.00332EPSS
Exploits0References2
OSV
OSV
added 2024/07/10 7:26 a.m.17 views

BIT-MEDIAWIKI-2024-40598

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can expose suppressed information for log events. The logdeleted attribute is not applied to entries...

4.3CVSS4.4AI score0.00332EPSS
Exploits0References2
OSV
OSV
added 2024/07/07 12:15 a.m.15 views

CVE-2024-40596

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The Special:Investigate feature can expose suppressed information for log events. TimelineService does not support properly suppressing...

4.3CVSS6.6AI score
Exploits0References1
OSV
OSV
added 2024/07/07 12:15 a.m.3 views

CVE-2024-40597

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose suppressed information for log events. The logdeleted attribute is not respected...

7.5CVSS6.9AI score
Exploits0References1
OSV
OSV
added 2024/07/07 12:15 a.m.13 views

CVE-2024-40598

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can expose suppressed information for log events. The logdeleted attribute is not applied to entries...

4.3CVSS6.6AI score
Exploits0References1
NVD
NVD
added 2024/07/07 12:15 a.m.20 views

CVE-2024-40597

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose suppressed information for log events. The logdeleted attribute is not respected...

7.5CVSS0.00405EPSS
Exploits0References1
NVD
NVD
added 2024/07/07 12:15 a.m.23 views

CVE-2024-40598

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can expose suppressed information for log events. The logdeleted attribute is not applied to entries...

4.3CVSS0.00332EPSS
Exploits0References1
NVD
NVD
added 2024/07/07 12:15 a.m.21 views

CVE-2024-40596

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The Special:Investigate feature can expose suppressed information for log events. TimelineService does not support properly suppressing...

4.3CVSS0.00332EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/07/07 12:0 a.m.4 views

MediaWiki Security Breach

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki versions prior to 1.42.1, which stems from a CheckUs...

7.5CVSS6.5AI score0.00405EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/07/06 12:0 a.m.18 views

CVE-2024-40596

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The Special:Investigate feature can expose suppressed information for log events. TimelineService does not support properly suppressing...

0.00332EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/06 12:0 a.m.13 views

CVE-2024-40597

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose suppressed information for log events. The logdeleted attribute is not respected...

6.7AI score0.00405EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/06 12:0 a.m.19 views

CVE-2024-40596

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The Special:Investigate feature can expose suppressed information for log events. TimelineService does not support properly suppressing...

6.7AI score0.00332EPSS
Exploits0References1
Rows per page
Query Builder