Lucene search
K

682 matches found

Cvelist
Cvelist
added 2023/06/27 12:0 a.m.29 views

CVE-2023-34838

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...

6AI score0.0075EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/06/27 12:0 a.m.13 views

CVE-2023-34838

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter...

7.2AI score0.0075EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/06/27 12:0 a.m.6 views

MicroWorld Technologies eScan Management Console 跨站脚本漏洞

The MicroWorld Technologies eScan Management Console is an eScan management console from MicroWorld Technologies, Inc. A cross-site scripting vulnerability exists in Microworld Technologies eScan Management console version v.14.0.1400.2281, which originates from a vulnerability that allows a remo...

5.4CVSS6AI score0.0075EPSS
Exploits1References2
OSV
OSV
added 2023/06/20 3:31 p.m.9 views

GHSA-7XQX-XWG9-JX34 NodCMS Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows an attacker with administrative privileges to execute arbitrary code and gain access to sensitive information via a crafted script to the address parameter...

4.8CVSS5.3AI score0.00546EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2023/06/20 3:31 p.m.24 views

NodCMS Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows an attacker with administrative privileges to execute arbitrary code and gain access to sensitive information via a crafted script to the address parameter...

4.8CVSS7.2AI score0.00546EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2023/06/20 3:15 p.m.26 views

CVE-2020-20697

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter...

4.8CVSS5.5AI score0.00546EPSS
Exploits1References1
OSV
OSV
added 2023/06/20 3:15 p.m.11 views

CVE-2020-20697

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter...

4.8CVSS7.4AI score
Exploits0References1
Prion
Prion
added 2023/06/20 3:15 p.m.12 views

Cross site scripting

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter...

4.3CVSS5.5AI score0.00546EPSS
Exploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/19 12:0 a.m.5 views

The vulnerability of the Windows Server operating system allows a perpetrator to bypass access control for RPC procedures.

The vulnerability of Windows Server operating system services is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass access control procedures for RPC calls using a specially created script...

8CVSS7.4AI score0.00773EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/06/19 12:0 a.m.6 views

The vulnerability of the Windows SMB Witness service allows a hacker to bypass access control procedures for RPC processes.

The vulnerability of the Windows SMB Witness service for Windows operating systems is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass access checks for RPC procedures using a specially created script...

7.5CVSS7.4AI score0.01203EPSS
Exploits0References3
CNVD
CNVD
added 2023/06/18 12:0 a.m.22 views

Adobe Commerce Security Bypass Vulnerability

Adobe Commerce is the United States of America Odobie Adobe company of a business and brand-oriented digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which can be exploited by an attacker to trigger a specially crafted script to bypass security features...

6.5CVSS6.7AI score0.00793EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/06/15 12:0 a.m.4 views

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company of a business and brand-oriented digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which can be exploited by an attacker to trigger a specially crafted script to bypass security features...

6.5CVSS6.6AI score0.00793EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/06/13 12:0 a.m.1 views

PT-2023-3123 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Windows Server Service affected versions not specified Description: The issue is related to errors in security settings of the Windows Server operating system, allowing a remote attacker to bypass access checks to RPC procedures using a...

8CVSS9.3AI score0.00773EPSS
Exploits0References9
NVD
NVD
added 2023/05/12 11:15 a.m.13 views

CVE-2023-30130

An issue found in CraftCMS v.3.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the Section parameter...

8.8CVSS8.8AI score0.01416EPSS
Exploits1References2
NVD
NVD
added 2023/05/12 1:15 a.m.12 views

CVE-2023-29809

SQL injection vulnerability found in Maximilian Vogt companymaps cmaps v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request...

9.8CVSS9.6AI score0.10514EPSS
Exploits5References3
OSV
OSV
added 2023/05/12 1:15 a.m.15 views

CVE-2023-29809

SQL injection vulnerability found in Maximilian Vogt companymaps cmaps v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request...

9.8CVSS8.8AI score0.10514EPSS
Exploits5References3
Prion
Prion
added 2023/05/12 1:15 a.m.15 views

Sql injection

SQL injection vulnerability found in Maximilian Vogt companymaps cmaps v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request...

7.5CVSS9.7AI score0.10514EPSS
Exploits5References3Affected Software1
CNVD
CNVD
added 2023/04/25 12:0 a.m.3 views

SQLite Buffer Overflow Vulnerability (CNVD-2023-32183)

SQLite is a lightweight database that is ACID compliant relational database management system. A buffer overflow vulnerability exists in SQLite3 v.3.27.1, which stems from the presence of a buffer overflow vulnerability that can be exploited by a local attacker to cause a denial of service via a...

5.5CVSS8.9AI score0.00347EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/04/14 1:55 a.m.2 views

SUSE CVE-2020-24736

Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script...

5.5CVSS6.3AI score0.00347EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2023/04/13 6:30 a.m.31 views

CVE-2020-24736

A flaw was found in SQLite. A buffer overflow vulnerability allows a local attacker to cause a denial of service via a crafted script...

6.2CVSS5.4AI score0.00347EPSS
Exploits1References3
Rows per page
Query Builder