Lucene search
+L

13322 matches found

CNNVD
CNNVD
added 2023/11/15 12:00 a.m.9 views

AVEVA Operations Control Logger Security Vulnerability

AVEVA Operations Control Logger is a control center for the UK's Jianwei Software AVEVA. It provides access across local and cloud applications. A security vulnerability exists in AVEVA Operations Control Logger that originates from a denial of service by allowing an authenticated user to delete...

7.1CVSS6.3AI score0.00219EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/11/14 10:15 p.m.6 views

CVE-2023-46582

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component...

7.8CVSS6.2AI score0.00298EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2023/11/14 3:51 p.m.10 views

libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart

A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the...

6.5CVSS5.8AI score0.00813EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/11/14 12:00 a.m.13 views

Microsoft Azure Security Vulnerabilities

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and...

8.6CVSS6.6AI score0.21542EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/14 12:00 a.m.10 views

Code-Projects Blood Bank Security Breach

Code-Projects Blood Bank is a blood bank system for the Code-Projects project. A security vulnerability exists in Code-Projects Blood Bank version 1.0 that originated from allowing an attacker to run arbitrary SQL commands via the bid parameter in delete.php...

7.8CVSS7.6AI score0.00795EPSS
SaveExploits4References3
ATTACKERKB
ATTACKERKB
added 2023/11/13 4:15 p.m.13 views

CVE-2023-48063

An issue was discovered in dreamercms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/category/delete...

4.3CVSS5.8AI score0.00247EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/13 4:15 p.m.24 views

CVE-2023-48063

An issue was discovered in dreamercms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/category/delete...

4.3CVSS0.00247EPSS
SaveExploits1References1
OSV
OSV
added 2023/11/13 4:15 p.m.22 views

CVE-2023-48063

An issue was discovered in dreamercms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/category/delete...

4.3CVSS6.9AI score0.00247EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2023/11/13 12:00 a.m.20 views

WordPress Delete Duplicate Posts Plugin <= 4.8.9 is vulnerable to Broken Access Control

Software Delete Duplicate Posts Type Plugin Vulnerable versions = 4.8.9 Fixed in 4.9 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47754 Patch priority Low CVSS severity Low 4.3 Developer CleverPlugins.com PSID e78902a6f1d5 Credits Huynh Tien Si Required...

9.8CVSS6.6AI score0.00509EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/13 12:00 a.m.31 views

CVE-2023-48063

An issue was discovered in dreamercms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/category/delete...

5AI score0.00247EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/11/13 12:00 a.m.15 views

Dreamer CMS Security Vulnerability

Dreamer CMS is a Dreamer Content Management System by Junnan Wang, an individual developer in China. A security vulnerability exists in Dreamer CMS version 4.1.3, which stems from a cross-site request forgery CSRF vulnerability. The vulnerability can be exploited by an attacker to delete a theme...

4.3CVSS6.8AI score0.00247EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/12 11:15 a.m.10 views

CVE-2023-6084

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the argument VUID leads to sql injection. The exploit has been disclosed to the public and ma...

9.8CVSS5.5AI score0.00873EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/11/12 12:00 a.m.13 views

PT-2023-6916 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions up to 11.9 Description: A critical issue was found in Tongda OA, affecting some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the VU ID argument leads to SQL injection...

9.8CVSS7.2AI score0.00873EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/11/12 12:00 a.m.10 views

TONGDA Office Anywhere Security Breach

TONGDA Office Anywhere is a collaborative office OA system. A security vulnerability exists in TONGDA Office Anywhere 2017 11.9 and earlier versions, which originates from a SQL injection vulnerability in the file general/vehicle/checking/delete.php...

9.8CVSS7.9AI score0.00873EPSS
SaveExploits1References4
GithubExploit
GithubExploit
added 2023/11/11 10:54 a.m.29 views

Exploit for SQL Injection in Code-Projects Blood_Bank

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-...

7.8CVSS8.4AI score0.00795EPSS
SaveExploits4
OSV
OSV
added 2023/11/09 1:15 p.m.14 views

CVE-2023-6052

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. Affected is an unknown function of the file general/system/censorwords/module/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...

9.8CVSS5.5AI score0.01032EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/11/09 12:00 a.m.7 views

Tongda OA 2017 Security Breach

Tongda2000 is a web-based intelligent office system from China Tongda Tongda. A security vulnerability exists in Tongda OA 2017 version 11.9 and earlier versions, which stems from an incorrect operation of the parameter DELETESTR that can lead to sql injection...

9.8CVSS7.3AI score0.01032EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/11/09 12:00 a.m.9 views

Tongda OA 2017 Security Breach

Tongda2000 is a web-based intelligent office system from China Tongda Tongda. A security vulnerability exists in Tongda OA 2017 version 11.9 and earlier versions, which stems from an incorrect operation of the parameter DELETESTR that can lead to sql injection...

9.8CVSS7.3AI score0.01032EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2023/11/09 12:00 a.m.13 views

The vulnerability of the Dell Command | Monitor software, which manages various computer parameters, stems from lack of access control mechanisms. This allows attackers to delete any files they desire.

The vulnerability of the Dell Command | Monitor software, which allows for monitoring and controlling various computer parameters, is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to delete arbitrary files...

7.1CVSS7.2AI score0.00155EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/09 12:00 a.m.14 views

PT-2023-32492 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.9 Description: A critical issue has been found in the software, affecting some unknown functionality of the file general/system/censor words/manage/delete.php. The manipulation of the DELETE STR argument leads...

9.8CVSS7.2AI score0.01032EPSS
SaveExploits1References5
Rows per page
Query Builder