Lucene search
+L

811 matches found

BDU FSTEC
BDU FSTEC
•added 2022/07/04 12:00 a.m.•9 views

The vulnerability of the del_typebuf() function in the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the deltypebuf function in the Vim text editor is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.3AI score0.0142EPSS
SaveExploits1References15Affected Software9
Positive Technologies
Positive Technologies
•added 2022/07/02 12:00 a.m.•0 views

PT-2022-3319

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0 Description The issue is related to an integer overflow or wraparound in the Vim text editor, specifically concerning the del typebuf function. This could potentially allow an attacker to impact the confidentiality,...

7.8CVSS0.0142EPSS
SaveExploits1References290
Openbugbounty
Openbugbounty
•added 2022/06/30 6:05 a.m.•14 views

del-psp.fr Cross Site Scripting vulnerability OBB-2700226

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•1 views

PT-2022-31921

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.120 Description The issue is related to the use of del timer sync before freeing in hci qca. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•4 views

PT-2022-31712

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.45 Description The issue is related to the use of del timer sync before freeing in hci qca. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•3 views

PT-2022-31443

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.13 Description The issue is related to the use of del timer sync before freeing in hci qca. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•2 views

PT-2022-31131

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.2 Description The issue is related to the use of del timer sync before freeing in hci qca. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.18.2,...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/10 12:00 a.m.•1 views

PT-2025-25960

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel, specifically in the cdns3 gadget driver. The problem occurs when the cdns3 gadget ep free request function frees the space...

7.8CVSS0.00193EPSS
SaveExploits0
CNVD
CNVD
•added 2022/05/31 12:00 a.m.•35 views

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45400)

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter in /admin.php/singer/admin/singer/del fo...

7.2CVSS8.2AI score0.00942EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/05/31 12:00 a.m.•26 views

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45895)

CSCMS Music Portal System is a diversified content management system from China Sunseeker Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which stems from the missing validation of the id parameter in /admin.php/Label/pagedel for external input SQ...

7.2CVSS2.9AI score0.00942EPSS
SaveExploits1References1
Prion
Prion
•added 2022/05/26 2:15 p.m.•26 views

Sql injection

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del...

6.5CVSS7.2AI score0.00942EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/26 12:00 a.m.•7 views

CVE-2022-29689: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/del...

7.2CVSS7.2AI score0.00942EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/26 12:00 a.m.•10 views

CVE-2022-29681: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del...

7.2CVSS7.2AI score0.00942EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/05/26 12:00 a.m.•5 views

PT-2022-19777

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/Label/page del API endpoint. Recommendations For version 4.2, avoid using the id parameter in the /admin.php/Label/pa...

7.2CVSS0.00942EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/05/26 12:00 a.m.•3 views

PT-2022-19775

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the CSCMS Music Portal System. The issue is related to the id parameter at the "/admin.php/Links/del" API endpoint. This allows for potential...

7.2CVSS0.00942EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/05/26 12:00 a.m.•3 views

PT-2022-19783

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/singer/admin/singer/del API endpoint. This allows for potential exploitation. Recommendations For version 4.2, avoid...

7.2CVSS0.00942EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/05/26 12:00 a.m.•2 views

PT-2022-19772

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System. The vulnerability is exploited via the id parameter at the "/admin.php/pic/admin/type/del" API endpoint. Recommendations For...

7.2CVSS0.00942EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/05/26 12:00 a.m.•16 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the id parameter in /admin.php/user/leveldel that lacks validation of externally...

7.2CVSS6.1AI score0.00942EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/05/26 12:00 a.m.•3 views

PT-2022-19781

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the CSCMS Music Portal System. The issue is related to the id parameter at the "/admin.php/user/level del" API endpoint. This allows for potential...

7.2CVSS0.00942EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/26 12:00 a.m.•9 views

CVE-2022-29660: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del...

9.8CVSS8.2AI score0.11954EPSS
SaveExploits1References2
Rows per page
Query Builder