Lucene search
+L

56 matches found

Mend
Mend
•added 2022/05/18 5:09 p.m.•1 views

CVE-2022-30599

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria...

9.8CVSS0.01449EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•1 views

CVE-2022-30599: Improper Neutralization of Special Elements used in an SQL Command

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria...

9.8CVSS8.1AI score0.01449EPSS
SaveExploits0References3
NVD
NVD
•added 2022/03/25 7:15 p.m.•33 views

CVE-2022-0983

An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default...

8.8CVSS0.00934EPSS
SaveExploits0References2
Mend
Mend
•added 2022/03/25 6:03 p.m.•1 views

CVE-2022-0983

An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default...

8.8CVSS0.00934EPSS
SaveExploits0References8
OSV
OSV
•added 2022/03/25 6:03 p.m.•33 views

CVE-2022-0983

An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default...

9AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/03/25 12:00 a.m.•60 views

CVE-2022-0983

An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default...

8.8CVSS7.3AI score0.00934EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/25 12:00 a.m.•3 views

CVE-2022-0983: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default...

8.8CVSS7.8AI score0.00934EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/11/19 4:15 p.m.•14 views

CVE-2021-33850

There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. The XSS payload executes whenever the user changes the clarity configuration in Microsoft Clarity version 0.3. The payload is stored on the configuring project Id page...

5.4CVSS6.2AI score0.01598EPSS
SaveExploits1References2
NVD
NVD
•added 2021/06/11 3:15 p.m.•36 views

CVE-2021-25409

Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set arbitrary notification via physically configuring device...

2.4CVSS0.00104EPSS
SaveExploits0References1
Citrix
Citrix
•added 2021/04/01 12:00 a.m.•12 views

FAQ: Configuring Local Access Using Receiver for HTML5 1.0

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article contains Frequently Asked Questions on configuring local access using Citrix Receiver f...

6.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2021/03/19 7:42 p.m.•62 views

Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection

Impact Users who are using an HTTPS proxy to issue HTTPS requests and haven't configured their own SSLContext via proxyconfig. Only the default SSLContext is impacted. Patches urllib3 =1.26.4 has the issue resolved. urllib31.26 is not impacted due to not supporting HTTPS requests via HTTPS proxie...

6.5CVSS2.1AI score0.02109EPSS
SaveExploits0References16Affected Software1
RedhatCVE
RedhatCVE
•added 2020/12/07 8:21 p.m.•50 views

CVE-2020-8554

A flaw was found in kubernetes. If a potential attacker can already create or edit services and pods, then they may be able to intercept traffic from other pods or nodes in the cluster. Mitigation ExternalIP addresses ranges can be configured as described below. OCP 4 is secure by default, though...

6.3CVSS0.09274EPSS
SaveExploits3References5
OpenVAS
OpenVAS
•added 2020/11/20 12:00 a.m.•17 views

GaussDB Kernel: Configuring the Log Name

The parameter logfilename specifies the server run log file name. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2020/11/20 12:00 a.m.•18 views

GaussDB Kernel: Configuring the SSL Encryption Algorithm

sslciphers specifies the SSL encryption algorithms used for secure connections. GaussDB Kernel supports the following algorithms: - DHE-RSA-AES128-GCM-SHA256 - DHE-RSA-AES256-GCM-SHA384 - DHE-RSA-AES128-CCM - DHE-RSA-AES256-CCM You are advised to set sslciphers to ALL. Then, GaussDB Kernel uses...

7.2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2020/11/20 12:00 a.m.•21 views

GaussDB Kernel: Configuring the Maximum Capacity of an Audit Log File

The parameter auditrotationsize specifies the maximum capacity of an audit log file. When the size of an audit log file reaches the specified value, another audit log file is automatically created. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a reference...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2020/11/20 12:00 a.m.•10 views

GaussDB Kernel: Configuring the Port

To prevent unauthorized connections to the database and illegal operations on data, you need to change the default port number in time. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2020/11/11 12:00 a.m.•11 views

openGauss: Configuring the Maximum Logging Duration of An Audit Log File

The parameter auditrotationinterval specifies the maximum logging duration of an audit log file. After the time expires, another audit log file is automatically Created. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/11/11 12:00 a.m.•25 views

openGauss: Configuring the Minimum Audit Log File Retention Period

The parameter auditfileremaintime specifies the minimum period for storing audit logs. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/11/11 12:00 a.m.•24 views

openGauss: Configuring the Level of Error-Deriving SQL Statements to Be Logged

The logminerrorstatement parameter specifies which level of SQL statements that cause an error will be recorded into server logs. SQL statements whose levels are higher than or equal to the configured level will be recorded into server logs. The valid values include DEBUG5, DEBUG4, DEBUG3, DEBUG2...

7.8AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/11/11 12:00 a.m.•10 views

openGauss: Configuring the Number of Connections to a Role

The number of connections to a role must be limited. If rolconnlimit is set to -1, the number of concurrent connections is unlimited. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.2AI score
SaveExploits0References1
Rows per page
Query Builder