Lucene search
+L

1963 matches found

OSV
OSV
added 2024/02/28 3:15 p.m.11 views

UBUNTU-CVE-2023-6917

A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges...

6.7CVSS5.8AI score0.002EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2024/02/28 2:39 p.m.39 views

CVE-2023-6917

A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges...

6CVSS7.1AI score0.002EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/28 12:00 a.m.12 views

Performance Co-Pilot Security Vulnerability

Performance Co-Pilot is an open source software infrastructure for monitoring, visualizing, logging, responding to, and controlling the state, activity, and performance of networks, computers, applications, and servers. A security vulnerability exists in Performance Co-Pilot PCP that stems from t...

6.7CVSS7.1AI score0.002EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/28 12:00 a.m.16 views

PT-2024-6049 · Unknown +5 · Performance Co-Pilot +5

Name of the Vulnerable Software and Affected Versions: Performance Co-Pilot PCP affected versions not specified Description: A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. This...

8.8CVSS7.2AI score0.01033EPSS
SaveExploits0References71
CNVD
CNVD
added 2024/02/27 12:00 a.m.22 views

SQL Injection Vulnerability in iFair of Beijing Yiharmonic Technology Co.

Enterprise iFair Collaboration Management System is a professional collaborative office software, the management system is highly compatible and suitable for a wide range of business types. There is a SQL injection vulnerability in iFair, which can be exploited by attackers to obtain sensitive...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2024/02/26 12:00 a.m.11 views

Weak Password Vulnerability in KingH5Stream of Beijing Asian Control Technology Development Co.

Ltd. is a high-tech industrial automation and informatization software platform enterprise founded in 1997. A weak password vulnerability exists in KingH5Stream, which can be exploited by attackers to obtain sensitive information...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/02/25 9:46 a.m.14 views

co-matic.com Cross Site Scripting vulnerability OBB-3858335

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNVD
CNVD
added 2024/02/19 12:00 a.m.27 views

Unauthorized Access Vulnerability in Intelligent Park Integrated Management Platform of Zhejiang Dahua Technology Co.(CNVD-2024-14380)

Zhejiang Dahua Technology Co., Ltd. is a leading supplier and solution provider of surveillance products. An unauthorized access vulnerability exists in the integrated management platform of the Smart Park of Zhejiang Dahua Technology Co. Ltd, which can be exploited by an attacker to add users...

7AI score
SaveExploits0
CNVD
CNVD
added 2024/02/15 12:00 a.m.26 views

SQL injection vulnerability in the water information management platform of Shandong Weimicro Technology Co.

Ltd. is a private scientific and technological enterprise with technology development as the main body, specializing in the research, development, production and sales of remote water, electricity, gas, heat four meters and meter reading system. The water information management platform of Shando...

7.5AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/02/13 3:28 p.m.27 views

wap-co-nop-sitiowebsc.azurewebsites.net Cross Site Scripting vulnerability OBB-3852309

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/02/07 4:37 p.m.9 views

calgarycoop.com Cross Site Scripting vulnerability OBB-3850027

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNNVD
CNNVD
added 2024/02/05 12:00 a.m.11 views

WordPress plugin Author Box, Guest Author and Co-Authors for Your Posts security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

7.5CVSS6.5AI score0.00656EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2024/02/03 6:24 a.m.15 views

vintagefurnitureco.co.uk Cross Site Scripting vulnerability OBB-3847923

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/02/03 3:12 a.m.11 views

susumu.co.jp Cross Site Scripting vulnerability OBB-3847812

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
HackRead
HackRead
added 2024/02/01 12:24 p.m.27 views

Ripple Co-Founder’s Personal XRP Wallet Breached in $112 Million Hack

By Deeba Ahmed Ripple’s co-founder Chris Larsen has acknowledged that his personal XRP wallet was hacked. This is a post from HackRead.com Read the original post: Ripple Co-Founders Personal XRP Wallet Breached in $112 Million Hack...

7.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/01/27 5:06 p.m.11 views

dm67.co Cross Site Scripting vulnerability OBB-3844837

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/01/27 12:25 a.m.11 views

shinmei-s.co.jp Improper Access Control vulnerability OBB-3844169

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
NVD
NVD
added 2024/01/24 10:15 a.m.24 views

CVE-2023-43996

An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.4CVSS5.5AI score0.00394EPSS
SaveExploits1References1
CVE
CVE
added 2024/01/24 12:00 a.m.64 views

CVE-2023-43996

CVE-2023-43996 affects Line mini-apps built by Q co ltd on Line v13.6.1. The root cause is leakage of the channel access token, enabling attackers to send crafted malicious notifications. Impact is limited to unauthorized notification delivery via token leakage. Remediation from the connected doc...

5.4CVSS5.5AI score0.00394EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/24 12:00 a.m.6 views

CVE-2023-43996

An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.4AI score0.00394EPSS
SaveExploits1References1
Rows per page
Query Builder