Lucene search
+L

9971 matches found

CNVD
CNVD
added 2021/03/16 12:00 a.m.28 views

MyBB SQL Injection Vulnerability (CNVD-2021-25711)

MyBB is a free open source forum software. A SQL injection vulnerability exists in the Copy Forums feature of the Forum Manager in versions of MyBB prior to 1.8.26. No detailed vulnerability details are available at this time...

7.2CVSS7.7AI score0.009EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/16 12:00 a.m.22 views

Rohan Kumar kubernetes-client 路径遍历漏洞

Rohan Kumar kubernetes-client is an open source application by Rohan Kumar. Provides smooth DSL access to the full Kubernetes and OpenShift REST APIs. A security vulnerability exists in fabric8 kubernetes-client in version 4.2.0 and after, which stems from the copy command lifting files outside o...

7.4CVSS6.6AI score0.01312EPSS
SaveExploits0References13
OSV
OSV
added 2021/03/15 6:15 p.m.11 views

CVE-2021-27947

SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. issue 2 of 3...

7.2CVSS5.8AI score0.009EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/15 6:15 p.m.22 views

Sql injection

SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. issue 2 of 3...

6.5CVSS7.4AI score0.009EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/15 6:15 p.m.6 views

CVE-2021-27947

SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. issue 2 of 3...

7.2CVSS8AI score0.009EPSS
SaveExploits0References2
CVE
CVE
added 2021/03/15 5:10 p.m.90 views

CVE-2021-27947

CVE-2021-27947 describes a SQL injection in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. Affected: MyBB versions prior to 1.8.26. Root cause: unsafe handling of input in the Copy Forum functionality leading to SQL injection. Impacts documented include potential data exposure...

7.2CVSS7.8AI score0.009EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/15 5:10 p.m.40 views

CVE-2021-27947

SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. issue 2 of 3...

7.9AI score0.009EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/15 12:00 a.m.11 views

MyBB SQL注入漏洞

MyBB is a free open source forum software. A SQL injection vulnerability exists in the Copy Forums feature of the Forum Manager in versions of MyBB prior to 1.8.26. No detailed vulnerability details are available at this time...

7.2CVSS5.9AI score0.009EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.6 views

The vulnerability of the “Copy as CURL” option in web browsers such as Firefox ESR, Firefox, and the Thunderbird email client allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the “Copy as CURL” option in web browsers such as Firefox ESR, Firefox, and the Thunderbird email client is related to the exposure of sensitive information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.3CVSS6.8AI score0.00347EPSS
SaveExploits0References12Affected Software7
Positive Technologies
Positive Technologies
added 2021/03/15 12:00 a.m.11 views

PT-2021-17687 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.26 Description: The issue is related to a SQL Injection vulnerability. It can be exploited via the Copy Forum feature in Forum Management. Recommendations: For versions prior to 1.8.26, update to version 1.8.26 or...

7.2CVSS7.1AI score0.009EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.7 views

The vulnerability of the shadow_copy2_get_shadow_copy_data function in the Samba networking communication software package, related to information disclosure, allows a perpetrator to gain access to confidential data.

The vulnerability of the shadowcopy2getshadowcopydata function in the Samba networking communication software package is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data remotely...

5.3CVSS6.6AI score0.13584EPSS
SaveExploits0References8Affected Software3
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:00 a.m.70 views

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0737-1)

The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating grant...

7.8CVSS6.8AI score0.00544EPSS
SaveExploits2References30
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:00 a.m.50 views

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0740-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating grant...

7.8CVSS6.8AI score0.00544EPSS
SaveExploits2References27
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:00 a.m.69 views

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0736-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating gra...

7.8CVSS6.8AI score0.00544EPSS
SaveExploits2References30
NVD
NVD
added 2021/03/04 8:15 p.m.47 views

CVE-2020-8298

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...

10CVSS0.11168EPSS
SaveExploits1References3
OSV
OSV
added 2021/03/04 8:15 p.m.41 views

CVE-2020-8298

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...

9.8CVSS7.3AI score0.11168EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/03/04 8:15 p.m.4 views

CVE-2020-8298

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...

10CVSS8.6AI score0.11168EPSS
SaveExploits1References4
Prion
Prion
added 2021/03/04 8:15 p.m.26 views

Command injection

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...

10CVSS9.7AI score0.11168EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/03/04 7:09 p.m.61 views

CVE-2020-8298

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...

9.8AI score0.11168EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/03/04 12:00 a.m.12 views

fs-path 命令注入漏洞

Mojin fs-path is Mojin an open source application . It provides the ability to scan files recursively or through filters. A command injection vulnerability exists in the fs-path node module before 0.0.25, which stems from the vulnerability of the fs-path node module to a user's use of "copy",...

10CVSS8.3AI score0.11168EPSS
SaveExploits1References4
Rows per page
Query Builder