Lucene search
+L

14512 matches found

CNNVD
CNNVD
•added 2024/09/02 12:00 a.m.•14 views

Huachu Digital Easytest Online Test Platform 安全漏洞

Huachu Digital Easytest Online Test Platform is an online test platform from Huachu Digital. A security vulnerability exists in Huachu Digital Easytest Online Test Platform version ver.24E01 and prior versions, which is caused by a SQL injection vulnerability in the download personal learning...

8.8CVSS7.9AI score0.00469EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/09/02 12:00 a.m.•16 views

Huachu Digital Easytest Online Test Platform 安全漏洞

Huachu Digital Easytest Online Test Platform is an online test platform from Huachu Digital. A security vulnerability exists in Huachu Digital Easytest Online Test Platform version 24E01 and earlier, which stems from improper handling of the uid parameter and could allow a remote attacker to...

9.8CVSS7.8AI score0.00487EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/09/02 12:00 a.m.•16 views

Huachu Digital Easytest Online Test Platform 安全漏洞

Huachu Digital Easytest Online Test Platform is an online test platform from Huachu Digital. A security vulnerability exists in Huachu Digital Easytest Online Test Platform version ver.24E01 and prior versions, which originates from an SQL injection vulnerability in the search course titles metho...

8.8CVSS8AI score0.00469EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/09/02 12:00 a.m.•14 views

PT-2024-29471 · Texas Instruments · Texas Instruments Fusion Digital Power Designer

Name of the Vulnerable Software and Affected Versions: Texas Instruments Fusion Digital Power Designer version 7.10.1 Description: The issue allows a local attacker to obtain sensitive information via the plaintext storage of credentials. This is due to insufficiently protected credentials in the...

6.6CVSS6.2AI score0.00171EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2024/09/02 12:00 a.m.•13 views

Huachu Digital Easytest Online Test Platform 安全漏洞

Huachu Digital Easytest Online Test Platform is an online test platform from Huachu Digital. A security vulnerability exists in Huachu Digital Easytest Online Test Platform version ver.24E01 and prior versions, which originates from a SQL injection vulnerability in the mock exam method...

8.8CVSS7.9AI score0.00469EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/09/02 12:00 a.m.•15 views

Huachu Digital Easytest Online Test Platform 安全漏洞

Huachu Digital Easytest Online Test Platform is an online test platform from Huachu Digital. A security vulnerability exists in Huachu Digital Easytest Online Test Platform version ver.24E01 and prior versions, which is caused by a SQL injection vulnerability in the download class learning course...

9.8CVSS7.9AI score0.00487EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2024/08/30 10:42 a.m.•19 views

Breaking Down AD CS Vulnerabilities: Insights for InfoSec Professionals

The most dangerous vulnerability you've never heard of. In the world of cybersecurity, vulnerabilities are discovered so often, and at such a high rate, that it can be very difficult to keep up with. Some vulnerabilities will start ringing alarm bells within your security tooling, while others ar...

7.9AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/08/30 2:20 a.m.•25 views

CVE-2024-8328 HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - Reflected XSS

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks...

5.4CVSS6.8AI score0.00292EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/08/30 2:20 a.m.•35 views

CVE-2024-8328 HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - Reflected XSS

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks...

5.4CVSS0.00292EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/08/30 2:14 a.m.•14 views

CVE-2024-8327 HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - SQL injection

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary SQL commands to read, modify, and delete database contents...

8.8CVSS7.9AI score0.00671EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/08/30 2:14 a.m.•39 views

CVE-2024-8327 HWA JIUH DIGITAL TECHNOLOGY Easy test Online Learning and Testing Platform - SQL injection

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary SQL commands to read, modify, and delete database contents...

8.8CVSS0.00671EPSS
SaveExploits0References2
OSV
OSV
•added 2024/08/29 2:15 p.m.•15 views

CVE-2024-5057

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12...

9.8CVSS5.8AI score0.02588EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/29 2:15 p.m.•35 views

CVE-2024-5057

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12...

9.8CVSS0.02588EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/29 2:04 p.m.•49 views

CVE-2024-5057 WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12...

9.3CVSS0.02588EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/29 2:04 p.m.•44 views

CVE-2024-5057 WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12...

9.3CVSS9.7AI score0.02588EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/29 2:04 p.m.•129 views

CVE-2024-5057

The Easy Digital Downloads WordPress plugin (versions through 3.2.12 ) is vulnerable to SQL Injection due to the improper neutralization of special elements used in SQL commands. This flaw allows attackers to execute arbitrary SQL commands, which can result in data leakage , data tampering , or a...

9.8CVSS9.8AI score0.02588EPSS
SaveIn wildExploits0References1Affected Software1
NVD
NVD
•added 2024/08/29 1:15 p.m.•50 views

CVE-2024-8297

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

7.5CVSS0.00534EPSS
SaveExploits0References5
CVE
CVE
•added 2024/08/29 12:31 p.m.•69 views

CVE-2024-8297

Summary: CVE-2024-8297 affects kitsada8621 Digital Library Management System v1.0. The vulnerability lies in the function JwtRefreshAuth within middleware/jwt_refresh_token_middleware.go , where manipulation of the Authorization parameter leads to improper output neutralization for logs. This iss...

7.5CVSS6.1AI score0.00534EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2024/08/29 12:31 p.m.•23 views

CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

6.9CVSS5.2AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/08/29 12:31 p.m.•17 views

CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

6.9CVSS5.5AI score0.00534EPSS
SaveExploits0References5
Rows per page
Query Builder