Lucene search
K

3898 matches found

Vulnrichment
Vulnrichment
added 2023/06/20 4:19 p.m.17 views

CVE-2023-2400

Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access...

6.8AI score0.00442EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/06/20 4:19 p.m.21 views

CVE-2023-2400

Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access...

4.1AI score0.00442EPSS
Exploits0References1
CVE
CVE
added 2023/06/20 4:19 p.m.44 views

CVE-2023-2400

Summary: CVE-2023-2400 affects Devolutions Server 2023.1.8 and earlier. The vulnerability stems from an improper deletion of resources in the user management feature, which allows an administrator to view the vaults of deleted users via database access. Affected software/area: Devolutions Server,...

2.7CVSS4AI score0.00442EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/20 12:0 a.m.5 views

PT-2023-19349 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2023.1.8 and earlier Description: The issue is related to the improper deletion of resources in the user management feature, allowing an administrator to view users' vaults of deleted users via database access...

2.7CVSS6.8AI score0.00442EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/06/19 12:0 a.m.3 views

PT-2023-22127 · Marksoft · Marksoft

Name of the Vulnerable Software and Affected Versions: Marksoft versions through Mobile:v.7.1.7 Marksoft version Login:1.4 Marksoft version API:20230605 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command...

9.8CVSS9.6AI score0.0062EPSS
Exploits0References3
NVD
NVD
added 2023/06/16 4:15 a.m.11 views

CVE-2023-32754

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

9.8CVSS9.9AI score0.01026EPSS
Exploits0References1
Prion
Prion
added 2023/06/16 4:15 a.m.11 views

Sql injection

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

7.5CVSS9.8AI score0.01026EPSS
Exploits0References1Affected Software1
Packet Storm
Packet Storm
added 2023/06/16 12:0 a.m.302 views

Quickad Classified Ads CMS 10.4 SQL Injection

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

7.1AI score
Exploits0
Vulnrichment
Vulnrichment
added 2023/06/16 12:0 a.m.12 views

CVE-2023-32754 Thinking Software Efence - SQL injection

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

9.8CVSS8AI score0.01026EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:0 a.m.5 views

The vulnerability of the software for processing and transmitting confidential data in Progress MOVEit Transfer arises from the lack of measures taken to protect the SQL query structure. This allows attackers to execute arbitrary SQL queries against the database.

The vulnerability of the software for processing and transmitting confidential data in Progress MOVEit Transfer is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...

10CVSS8.5AI score0.12808EPSS
Exploits0References4Affected Software2
NVD
NVD
added 2023/06/13 3:15 p.m.11 views

CVE-2023-33568

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists...

7.5CVSS7.4AI score0.1494EPSS
Exploits2References5
OSV
OSV
added 2023/06/13 9:15 a.m.4 views

CVE-2023-26204

A plaintext storage of a password vulnerability CWE-256 in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions may allow an attacker able to access user DB content to impersonate...

9.8CVSS7.3AI score0.00435EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/06/13 12:0 a.m.5 views

PT-2023-22709

Name of the Vulnerable Software and Affected Versions TMT Lockcell versions prior to 15 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations For versions...

9.8CVSS7.4AI score0.01665EPSS
Exploits2References9
CNNVD
CNNVD
added 2023/06/13 12:0 a.m.2 views

HotelDruid SQL注入漏洞

HotelDruid is a hotel management system by the Digitaldruid.net team. The system includes features such as room management, financial management and inventory management. A security vulnerability exists in HotelDruid version v3.0.5, which can be exploited by an attacker to retrieve data from a...

8.8CVSS8.6AI score0.01546EPSS
Exploits2References2
CNNVD
CNNVD
added 2023/06/13 12:0 a.m.5 views

Rockwell Automation FactoryTalk Services Platform 信任管理问题漏洞

Rockwell Automation FactoryTalk Services Platform is a suite of services platforms from Rockwell Automation, Inc. that consists of multiple products that provide applications with routine services such as diagnostic information, health monitoring, and real-time data access. A security vulnerabili...

8.2CVSS7.7AI score0.00203EPSS
Exploits0References2
OSV
OSV
added 2023/06/12 3:15 a.m.4 views

CVE-2023-35036

In Progress MOVEit Transfer before 2021.0.7 13.0.7, 2021.1.5 13.1.5, 2022.0.5 14.0.5, 2022.1.6 14.1.6, and 2023.0.2 15.0.2, SQL injection vulnerabilities have been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...

9.1CVSS5.8AI score0.12808EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/06/12 3:15 a.m.2 views

CVE-2023-35036

In Progress MOVEit Transfer before 2021.0.7 13.0.7, 2021.1.5 13.1.5, 2022.0.5 14.0.5, 2022.1.6 14.1.6, and 2023.0.2 15.0.2, SQL injection vulnerabilities have been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...

9.1CVSS5.8AI score0.12808EPSS
Exploits0References4
Packet Storm
Packet Storm
added 2023/06/08 12:0 a.m.266 views

Expert Restaurant eCommerce 1.0 SQL Injection

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2023/06/07 12:0 a.m.271 views

Expert Job Portal Management System 1.0 SQL Injection

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

7.1AI score
Exploits0
0day.today
0day.today
added 2023/06/07 12:0 a.m.271 views

Expert Job Portal Management System 1.0 SQL Injection Vulnerability

┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐ ┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ┌┘ Vulnerability ┌┘ └───────────────────────────────────────────────────────────────────────────────────────┘┘ : Author : CraCkEr : │...

7.1AI score
Exploits0
Rows per page
Query Builder