Lucene search
+L

3515 matches found

Cvelist
Cvelist
•added 2023/04/20 12:00 a.m.•46 views

CVE-2022-29944

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by intents. An existing intents does not redirect to a new path, even if a new intent that shares the path with higher priority is installed...

5.5AI score0.00764EPSS
SaveExploits1References2
CVE
CVE
•added 2023/04/20 12:00 a.m.•75 views

CVE-2022-29944

CVE-2022-29944 affects ONOS 2.5.1. The issue is an incorrect comparison of paths installed by intents, causing an existing intent to not redirect to a new path when a higher-priority intent shares that path. The public documents consistently describe this as the root cause but do not provide conc...

5.3CVSS5.2AI score0.00764EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/20 12:00 a.m.•6 views

CVE-2021-38364: Incorrect Comparison

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed by intents. A remote attacker can install or remove a new intent, and consequently modify or delete the existing flow rules related to other intents...

6.5CVSS5.9AI score0.00848EPSS
SaveExploits1References3
osv-cve
osv-cve
•added 2023/04/20 12:00 a.m.•26 views

CVE-2022-29944

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by intents. An existing intents does not redirect to a new path, even if a new intent that shares the path with higher priority is installed...

5.3CVSS5.5AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2023/04/20 12:00 a.m.•34 views

CVE-2021-38364

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed by intents. A remote attacker can install or remove a new intent, and consequently modify or delete the existing flow rules related to other intents...

6.6AI score0.00848EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/20 12:00 a.m.•5 views

CVE-2022-29944: Incorrect Comparison

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by intents. An existing intents does not redirect to a new path, even if a new intent that shares the path with higher priority is installed...

5.3CVSS5.8AI score0.00764EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/04/20 12:00 a.m.•17 views

CVE-2022-29944

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by intents. An existing intents does not redirect to a new path, even if a new intent that shares the path with higher priority is installed...

5.3AI score0.00764EPSS
SaveExploits1References2
Hacker One
Hacker One
•added 2023/04/10 8:45 a.m.•58 views

GitHub: Smuggling content in PR with refs/replace in GitHub

An incorrect comparison vulnerability was found in GitHub Enterprise Server, allowing commit smuggling through the display of an incorrect diff in the GitHub pull request UI. This vulnerability required write access to the repository and affected versions 3.7.0 and above. It was fixed in versions...

7.1CVSS5.9AI score0.00589EPSS
SaveExploits0
OSV
OSV
•added 2023/04/07 7:15 p.m.•34 views

CVE-2023-23762

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. To do so, an attacker would need write access to the repository and be able to correctly guess the target branch before it’s created by the code...

5.3CVSS5.9AI score0.0064EPSS
SaveExploits0References5
NVD
NVD
•added 2023/04/07 7:15 p.m.•44 views

CVE-2023-23762

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. To do so, an attacker would need write access to the repository and be able to correctly guess the target branch before it’s created by the code...

6.5CVSS6.5AI score0.0064EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2023/04/07 6:41 p.m.•12 views

CVE-2023-23762 Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. To do so, an attacker would need write access to the repository and be able to correctly guess the target branch before it’s created by the code...

6.5CVSS6.5AI score0.0064EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/04/07 6:41 p.m.•47 views

CVE-2023-23762 Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. To do so, an attacker would need write access to the repository and be able to correctly guess the target branch before it’s created by the code...

6.5CVSS6.7AI score0.0064EPSS
SaveExploits0References5
CVE
CVE
•added 2023/04/07 6:41 p.m.•75 views

CVE-2023-23762

CVE-2023-23762 describes an incorrect comparison vulnerability in GitHub Enterprise Server that enables commit smuggling by displaying an incorrect diff. An attacker would need write access to a repository and must correctly guess the target branch before it’s created by the maintainer. The issue...

6.5CVSS5.5AI score0.0064EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
•added 2023/04/07 12:00 a.m.•21 views

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is a U.S. GitHub open source application. It provides a platform for setting up one's GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server that stems from the presence of an...

6.5CVSS5.8AI score0.0064EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/06 12:00 a.m.•9 views

CVE-2023-1908: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/categories/viewcategory.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. ...

9.8CVSS5.5AI score0.00737EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/04/06 12:00 a.m.•17 views

Simple Mobile Comparison Website SQL注入漏洞

Simple Mobile Comparison Website is a mobile comparison website by Carlo Montero personal developer. It allows users to compare the specifications of smartphones. SourceCodester Simple Mobile Comparison Website version 1.0 suffers from a SQL injection vulnerability that stems from a problem in th...

9.8CVSS7.1AI score0.00737EPSS
SaveExploits1References4
NVD
NVD
•added 2023/04/02 7:15 a.m.•33 views

CVE-2023-1792

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/fields/managefield.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS7.3AI score0.00726EPSS
SaveExploits1References3
OSV
OSV
•added 2023/04/02 7:15 a.m.•16 views

CVE-2023-1792

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/fields/managefield.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS5.7AI score0.00726EPSS
SaveExploits1References3
CVE
CVE
•added 2023/04/02 7:00 a.m.•73 views

CVE-2023-1792

CVE-2023-1792 affects SourceCodester Simple Mobile Comparison Website 1.0. The vulnerability resides in the GET Parameter Handler, specifically the file /admin/fields/manage_field.php, where manipulating the id argument leads to SQL injection. The issue can be exploited remotely and has been disc...

9.8CVSS8.3AI score0.00726EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/02 12:00 a.m.•10 views

CVE-2023-1792: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/fields/managefield.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS5.5AI score0.00726EPSS
SaveExploits1References3
Rows per page
Query Builder