Lucene search
K

867 matches found

Circl
Circl
added 2024/10/30 12:49 a.m.13 views

CVE-2024-51378

creationtimestamp| type| source ---|---|--- 2024-10-30 00:49:07+00:00| exploited| https://t.me/cvedetector/9380 2024-10-30 02:57:23+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8886 2024-11-01 15:52:35+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/6249...

10CVSS7.5AI score0.93851EPSS
Exploits7References17
Cvelist
Cvelist
added 2024/10/26 8:26 p.m.13 views

CVE-2020-26306 GHSL-2020-296: Regular Expression Denial of Service (ReDoS) in Knwl.js

Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Versions 1.0.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are...

8.7CVSS0.0021EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/26 12:0 a.m.2 views

PT-2024-10796 · Knwl.Js · Knwl.Js

Name of the Vulnerable Software and Affected Versions: Knwl.js versions 1.0.2 and prior Description: The issue concerns a Regular Expression Denial of Service ReDoS in the Knwl.js library, which is used for parsing text to extract information such as dates, times, phone numbers, and more. No...

8.7CVSS7AI score0.0021EPSS
Exploits0References8
OSV
OSV
added 2024/10/22 5:15 p.m.2 views

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

7.5CVSS5.8AI score0.00115EPSS
Exploits1References1
NVD
NVD
added 2024/10/22 5:15 p.m.21 views

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

7.5CVSS0.00115EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/10/22 12:0 a.m.1 views

Client Management System SQL注入漏洞

Client Management System is a system for managing customer relationships by an individual Indian developer Haneen Gufran. A security vulnerability exists in Client Management System version 1.0 that originates from SQL injection in the Between Dates Reports parameter of the...

7.5CVSS7.9AI score0.00115EPSS
Exploits1References2
CVE
CVE
added 2024/10/22 12:0 a.m.50 views

CVE-2024-48570

CVE-2024-48570 affects Client Management System 1.0. A SQL injection vulnerability exists in the Between Dates Reports parameter of the /admin/bwdates-reports-ds.php endpoint. The CVSS 3.1 base score is 7.5 (High) with Confidentiality impact High; no integrity/availability impact described. Conne...

7.5CVSS8.3AI score0.00115EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/22 12:0 a.m.20 views

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

8.5AI score0.00115EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/10/22 12:0 a.m.12 views

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

0.00115EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/10/22 12:0 a.m.2 views

PT-2024-33150 · Unknown · Client Management System

Name of the Vulnerable Software and Affected Versions: Client Management System version 1.0 Description: A SQL injection issue was discovered in the Client Management System via the Between Dates Reports parameter at the "/admin/bwdates-reports-ds.php" API endpoint. Recommendations: For Client...

7.5CVSS7.9AI score0.00115EPSS
Exploits1References4
NVD
NVD
added 2024/10/20 12:15 a.m.12 views

CVE-2024-10160

A vulnerability, which was classified as critical, has been found in PHPGurukul Boat Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php of the component BW Dates Report Page. The manipulation of the argument fdate/tdate leads to...

8.8CVSS0.00097EPSS
Exploits1References5
OSV
OSV
added 2024/10/20 12:15 a.m.1 views

CVE-2024-10160

A vulnerability, which was classified as critical, has been found in PHPGurukul Boat Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php of the component BW Dates Report Page. The manipulation of the argument fdate/tdate leads to...

8.8CVSS5.6AI score0.00097EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/10/20 12:0 a.m.11 views

CVE-2024-10160 PHPGurukul Boat Booking System BW Dates Report Page bwdates-report-details.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Boat Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php of the component BW Dates Report Page. The manipulation of the argument fdate/tdate leads to...

6.5CVSS7.5AI score0.00097EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/10/20 12:0 a.m.18 views

CVE-2024-10160 PHPGurukul Boat Booking System BW Dates Report Page bwdates-report-details.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Boat Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php of the component BW Dates Report Page. The manipulation of the argument fdate/tdate leads to...

6.5CVSS0.00097EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/10/20 12:0 a.m.2 views

PHPGurukul Boat Booking System SQL注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which originates from an SQL injection vulnerability contained in the fdate/tdate parameter of the /admin/bwdates-report-details.php...

8.8CVSS6.8AI score0.00097EPSS
Exploits1References6
Circl
Circl
added 2024/10/15 10:56 a.m.1 views

CVE-2024-48914

creationtimestamp| type| source ---|---|--- 2024-10-15 10:56:35+00:00| published-proof-of-concept| https://github.com/vendurehq/vendure/security/advisories/GHSA-r9mq-3c9r-fmjq 2024-10-15 18:36:47+00:00| seen| https://t.me/cvedetector/7927 2024-10-21 10:04:39+00:00| published-proof-of-concept|...

9.1CVSS7.3AI score0.92497EPSS
Exploits1References7
Circl
Circl
added 2024/10/10 12:0 p.m.6 views

CVE-2024-41981

creationtimestamp| type| source ---|---|--- 2024-10-10 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-02 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-06...

7.8CVSS6.9AI score0.00045EPSS
Exploits0References2
OSV
OSV
added 2024/10/09 12:52 p.m.1 views

CLSA-2024-1728478342 Fix of 5 CVEs

New microcode update packages from upstream up to 2024-08-13: - Updated microcodes: sig 0x00050657, pfmask 0xbf, 2024-03-01, rev 0x5003707, size 39936 sig 0x0005065b, pfmask 0xbf, 2024-04-01, rev 0x7002904, size 30720 sig 0x000606a6, pfmask 0x87, 2024-04-01, rev 0xd0003e7, size 308224 sig...

7.8CVSS6.2AI score0.00109EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/09/16 5:16 p.m.2 views

CVE-2024-24968

Improper finite state machines FSMs in hardware logic in some IntelR Processors may allow an privileged user to potentially enable a denial of service via local access...

5.6CVSS6.4AI score0.00071EPSS
Exploits0References6
Cvelist
Cvelist
added 2024/09/06 4:26 p.m.16 views

CVE-2024-21898 QTS, QuTS hero

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build...

8.8CVSS0.01978EPSS
Exploits0References1
Rows per page
Query Builder