Lucene search
+L

513 matches found

Vulnrichment
Vulnrichment
•added 2023/11/16 12:00 a.m.•23 views

CVE-2023-47003

An issue in RedisGraph v.2.12.10 allows an attacker to execute arbitrary code and cause a denial of service via a crafted string in DataBlockItemIsDeleted...

7.8AI score0.01087EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/11/13 1:13 p.m.•43 views

CVE-2023-6098 Cross-site Scripting on ICSSolution ICS Business Manager

An XSS vulnerability has been discovered in ICS Business Manager affecting version 7.06.0028.7066. A remote attacker could send a specially crafted string exploiting the obddact parameter, allowing the attacker to steal an authenticated user's session, and perform actions within the application...

6.3CVSS6.1AI score0.0049EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/01 10:15 p.m.•29 views

Cross site scripting

Reflected Cross-Site Scripting XSS vulnerability in dmpop Mejiro Commit Versions Prior To 3096393 allows attackers to run arbitrary code via crafted string in metadata of uploaded images...

5.8CVSS6AI score0.00399EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/31 12:00 a.m.•24 views

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

6.2AI score0.00387EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/10/31 12:00 a.m.•44 views

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

5.5AI score0.00387EPSS
SaveExploits1References1
Mend
Mend
•added 2023/10/31 12:00 a.m.•4 views

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

5.4CVSS0.00387EPSS
SaveExploits1References3
OSV
OSV
•added 2023/10/31 12:00 a.m.•25 views

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

6.2AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/31 12:00 a.m.•18 views

MiniCMS 跨站脚本漏洞

MiniCMS is the minimalist content management system for personal websites. A cross-site scripting vulnerability exists in MiniCMS version 1.11, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to run arbitrary...

5.4CVSS6.6AI score0.00387EPSS
SaveExploits1References2
Prion
Prion
•added 2023/10/26 10:15 p.m.•31 views

Buffer overflow

Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprintf function...

7.5CVSS9.5AI score0.00831EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/10/26 12:00 a.m.•20 views

ABUS TVIP Security Vulnerability

ABUS TVIP is a series of video surveillance cameras from the German company ABUS. A security vulnerability exists in ABUS TVIP that stems from the presence of a buffer overflow vulnerability that allows an attacker to gain control of the program by sending a carefully crafted string...

9.8CVSS7.3AI score0.00831EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/10/26 12:00 a.m.•48 views

CVE-2018-17878

Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprintf function...

9.6AI score0.00831EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2023/10/25 6:32 p.m.•27 views

Inefficient Regular Expression Complexity in node-email-check

ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component...

7.5CVSS7AI score0.01077EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2023/10/25 6:17 p.m.•29 views

CVE-2023-39619

ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component...

7.5CVSS7.2AI score0.01077EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/10/24 12:00 a.m.•42 views

CVE-2023-39619

ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component...

7.4AI score0.01077EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/24 12:00 a.m.•4 views

CVE-2023-39619: Inefficient Regular Expression Complexity

ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component...

7.5CVSS7.2AI score0.01077EPSS
SaveExploits1References2
OSV
OSV
•added 2023/10/24 12:00 a.m.•38 views

CVE-2023-39619

ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component...

6.8AI score
SaveExploits0References5
Prion
Prion
•added 2023/10/16 9:15 p.m.•30 views

Sql injection

SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page...

7.5CVSS9.3AI score0.00815EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/09/01 4:15 p.m.•34 views

Sql injection

SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function...

5CVSS7.4AI score0.0098EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/01 12:00 a.m.•18 views

CVE-2023-40771

SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function...

7.2AI score0.0098EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/09/01 12:00 a.m.•45 views

CVE-2023-40771

SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function...

7.7AI score0.0098EPSS
SaveExploits1References1
Rows per page
Query Builder