Lucene search
+L

1694 matches found

Cvelist
Cvelist
added 2024/03/06 11:34 a.m.31 views

CVE-2024-25102 Information Disclosure Vulnerability in CDAC AppSamvid Software

This vulnerability exists in AppSamvid software due to the usage of a weaker cryptographic algorithm hash SHA1 in user login component. An attacker with local administrative privileges could exploit this to obtain the password of AppSamvid on the targeted system. Successful exploitation of this...

7.8CVSS7AI score0.00133EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/06 11:10 a.m.28 views

BIT-MYSQL-CLIENT-2020-2780

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

6.5CVSS6.5AI score0.0243EPSS
SaveExploits0References9
OSV
OSV
added 2024/03/06 11:9 a.m.28 views

BIT-MARIADB-2020-14789

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.9CVSS5.4AI score0.02653EPSS
SaveExploits0References10
OSV
OSV
added 2024/03/06 11:9 a.m.45 views

BIT-MYSQL-CLIENT-2021-2011

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client...

7.1CVSS5.6AI score0.03028EPSS
SaveExploits0References6
OSV
OSV
added 2024/03/06 11:8 a.m.29 views

BIT-MYSQL-CLIENT-2021-2174

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.4CVSS4.5AI score0.01925EPSS
SaveExploits0References6
OSV
OSV
added 2024/02/29 5:15 a.m.9 views

CVE-2023-51528

Cross-Site Request Forgery CSRF vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.12...

8.8CVSS7.3AI score0.00241EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/27 10:15 p.m.31 views

CVE-2024-26297

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

8.8CVSS7.2AI score0.00924EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/27 10:15 p.m.21 views

CVE-2024-26298

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

8.8CVSS7.2AI score0.00924EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/27 10:15 p.m.18 views

CVE-2024-26296

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

8.8CVSS7.2AI score0.00924EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/27 10:4 p.m.17 views

CVE-2024-26298

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

7.2CVSS7.6AI score0.00924EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/27 10:3 p.m.16 views

CVE-2024-26297

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

7.2CVSS7.6AI score0.00924EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/27 9:54 p.m.41 views

CVE-2024-26294

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

7.2CVSS7.4AI score0.00928EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/27 7:4 p.m.5 views

UBUNTU-CVE-2021-46949

In the Linux kernel, the following vulnerability has been resolved: sfc: farch: fix TX queue lookup in TX flush done handling We're starting from a TXQ instance number 'qid', not a TXQ type, so efxgettxqueue is inappropriate and could return NULL, leading to panics...

5.5CVSS5.7AI score0.00222EPSS
SaveExploits0References7
Packet Storm
Packet Storm
added 2024/02/27 12:0 a.m.289 views

Atlassian Confluence Data Center And Server Authentication Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control', 'Description' = %q This module exploits a broken...

10CVSS7.4AI score0.99156EPSS
SaveExploits39
OSV
OSV
added 2024/02/23 8:15 p.m.7 views

CVE-2024-1832

A vulnerability has been found in SourceCodester Complete File Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Login Form. The manipulation of the argument username with the input...

9.8CVSS5.7AI score0.00881EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/02/23 7:31 p.m.19 views

CVE-2024-1832 SourceCodester Complete File Management System Admin Login Form sql injection

A vulnerability has been found in SourceCodester Complete File Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Login Form. The manipulation of the argument username with the input...

7.5CVSS7.6AI score0.00881EPSS
SaveExploits1References3
CVE
CVE
added 2024/02/23 7:0 p.m.94 views

CVE-2024-1831

CVE-2024-1831 affects SourceCodester Complete File Management System 1.0, with the login form in users/index.php vulnerable to SQL injection via the username parameter (example payload torada%27+or+%271%27+%3D+%271%27+--+-). The vulnerability can be exploited remotely and has been publicly disclo...

9.8CVSS7.5AI score0.00731EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2024/02/23 3:15 p.m.20 views

Design/Logic Flaw

In the Linux kernel, the following vulnerability has been resolved: serial: imx: fix tx statemachine deadlock When using the serial port as RS485 port, the tx statemachine is used to control the RTS pin to drive the RS485 transceiver TXEN pin. When the TTY port is closed in the middle of a...

7.4AI score0.00175EPSS
SaveExploits0References6
OSV
OSV
added 2024/02/23 3:15 p.m.7 views

UBUNTU-CVE-2023-52456

In the Linux kernel, the following vulnerability has been resolved: serial: imx: fix tx statemachine deadlock When using the serial port as RS485 port, the tx statemachine is used to control the RTS pin to drive the RS485 transceiver TXEN pin. When the TTY port is closed in the middle of a...

5.5CVSS6.2AI score0.00175EPSS
SaveExploits0References19
OSV
OSV
added 2024/02/23 2:46 p.m.9 views

CVE-2023-52456 serial: imx: fix tx statemachine deadlock

In the Linux kernel, the following vulnerability has been resolved: serial: imx: fix tx statemachine deadlock When using the serial port as RS485 port, the tx statemachine is used to control the RTS pin to drive the RS485 transceiver TXEN pin. When the TTY port is closed in the middle of a...

5.9AI score
SaveExploits0References10
Rows per page
Query Builder