Lucene search
+L

8254 matches found

ATTACKERKB
ATTACKERKB
added 2023/10/12 12:15 p.m.5 views

CVE-2023-5046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Procost: before 1390...

9.8CVSS7.4AI score0.00651EPSS
SaveExploits0References3
Prion
Prion
added 2023/10/12 12:15 p.m.16 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Procost: before 1390...

7.5CVSS9.8AI score0.00651EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/12 11:58 a.m.33 views

CVE-2023-5045 SQLi in Biltay's Kayısı

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Kayisi: before 1286...

9.8CVSS10AI score0.00651EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/10/12 11:55 a.m.23 views

CVE-2023-5046 SQLi in Biltay's Procost

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Procost: before 1390...

9.8CVSS10AI score0.00651EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/12 12:0 a.m.10 views

Juniper Networks Junos OS Buffer Error Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS, which is caused by a stack-based buffer overfl...

5.5CVSS7.3AI score0.00163EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/10/12 12:0 a.m.12 views

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved Security Vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system designed for use with the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK...

8.8CVSS6.9AI score0.00582EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/10/12 12:0 a.m.20 views

Juniper Networks Junos and Junos EVO Buffer Error Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos and Junos EVO, which is caused by a stack-based buffer overflow...

5.5CVSS7.3AI score0.00163EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/10/12 12:0 a.m.33 views

The vulnerability of the CLI microprogramming software for D-Link routers such as DIR-2150 and DIR-1260 allows a hacker to execute arbitrary code.

The vulnerability of the CLI microprogramming software-based D-Link DIR-2150 and DIR-1260 routers is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.1AI score0.00997EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/10/12 12:0 a.m.6 views

PT-2023-31563

Name of the Vulnerable Software and Affected Versions Biltay Technology Procost versions prior to 1390 Description The issue is related to an SQL Injection vulnerability, allowing for improper neutralization of special elements used in an SQL command. This can lead to SQL Injection and Command Li...

9.8CVSS7.4AI score0.00651EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/10/12 12:0 a.m.10 views

Juniper Networks Junos OS Buffer Error Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has a security vulnerability that originates from a buffer overflow vulnerability in a CLI...

5.5CVSS7.3AI score0.00163EPSS
SaveExploits0References5
OSV
OSV
added 2023/10/11 9:15 p.m.6 views

CVE-2023-44187

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system. Th...

5.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/11 9:15 p.m.29 views

Design/Logic Flaw

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system. Th...

1.7CVSS5.5AI score0.00169EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/11 8:37 p.m.18 views

CVE-2023-44187 Junos OS Evolved: 'file copy' CLI command can disclose password to shell users

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system. Th...

5.9CVSS6.8AI score0.00169EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/11 12:0 a.m.11 views

The vulnerability of the implementation of the SOCKS5 protocol in the command-line utility cURL allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the SOCKS5 protocol implementation in the CURL command-line utility is related to the issue of the operation going beyond the buffer boundaries when processing the hostname length. Exploiting this vulnerability allows a remote attacker to cause service failures or execute...

7.6CVSS7.5AI score0.78483EPSS
SaveExploits6References16Affected Software9
CNNVD
CNNVD
added 2023/10/11 12:0 a.m.10 views

Juniper Networks Junos OS Evolved Information Disclosure Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to view passwords provided on the CLI command line...

5.9CVSS6.9AI score0.00169EPSS
SaveExploits0References3
CNVD
CNVD
added 2023/10/11 12:0 a.m.90 views

cURL SOCKS5 Heap Overflow Vulnerability

cURL is a network data transfer project. Usually when we say cURL, we mean the cURL command line tool. cURL's underlying use is the libcurl library. A heap overflow vulnerability exists in cURL SOCKS5, which can be exploited by an attacker to construct a malicious hostname and cause code executio...

9.8CVSS7.6AI score0.78483EPSS
SaveExploits6References1
OSV
OSV
added 2023/10/10 5:15 p.m.11 views

CVE-2023-41838

An improper neutralization of special elements used in an os command 'os command injection' in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker to execute unauthorized code or commands via FortiManager cli...

7.1CVSS5.9AI score0.00508EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/10 2:15 p.m.12 views

AZL-34591 CVE-2023-44487 affecting package cf-cli for versions less than 8.4.0-13

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

7.5CVSS6.7AI score0.99999EPSS
SaveExploits21References1
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.12 views

Fortinet FortiManager Operating System Command Injection Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and the ability to group devices into different administrative domains ADOMs to further simplify multi-device security deployme...

7.1CVSS7.9AI score0.00508EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.6 views

Fortinet FortiManager and FortiAnalyzer Operating System Command Injection Vulnerabilities

Fortinet FortiManager and Fortinet FortiAnalyzer are both products from Fortinet, Inc. Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains...

7.8CVSS7.3AI score0.01336EPSS
SaveExploits1References5
Rows per page
Query Builder