Lucene search
K

756 matches found

CNVD
CNVD
added 2022/05/24 12:0 a.m.20 views

Rescue Dispatch Management System跨站脚本漏洞

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. rescue dispatch management system is vulnerable to a cross-site scripting vulnerability that could be exploited to inject malicious JavaScript programs, steal other user cookies, etc...

5.4CVSS2AI score0.00206EPSS
Exploits1References1
OSV
OSV
added 2022/05/23 5:16 p.m.2 views

CVE-2022-30017

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...

5.4CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2022/05/23 5:16 p.m.12 views

Improper access control

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...

6.5CVSS8.6AI score0.0031EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2022/05/23 5:16 p.m.13 views

CVE-2022-30017

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...

5.4CVSS0.00206EPSS
Exploits1References2
NVD
NVD
added 2022/05/23 5:16 p.m.9 views

CVE-2022-30016

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...

8.8CVSS0.0031EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/23 5:16 p.m.1 views

CVE-2022-30016

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...

8.8CVSS5.9AI score0.0031EPSS
Exploits1References3
OSV
OSV
added 2022/05/23 5:16 p.m.0 views

CVE-2022-30016

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...

8.8CVSS7.3AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/23 5:16 p.m.1 views

CVE-2022-30017

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...

5.4CVSS5.9AI score0.00206EPSS
Exploits1References3
CVE
CVE
added 2022/05/23 4:59 p.m.76 views

CVE-2022-30016

CVE-2022-30016 affects Rescue Dispatch Management System 1.0. The issue is an Incorrect Access Control vulnerability that allows unauthorized access via the URL path: /rdms/admin/?page=system_info on localhost. The connected reports consistently describe an access-control error without detailing ...

8.8CVSS8.6AI score0.0031EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/05/23 4:59 p.m.14 views

CVE-2022-30016

Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=systeminfo...

8.9AI score0.0031EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/05/23 4:20 p.m.12 views

CVE-2022-30017

Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing...

5.7AI score0.00206EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/23 12:0 a.m.1 views

Rescue Dispatch Management System 访问控制错误漏洞

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. version 1.0 of Rescue Dispatch Management System contains an access control error vulnerability that could be exploited by attackers to cause unauthorized access...

8.8CVSS5.6AI score0.0031EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/05/23 12:0 a.m.1 views

Rescue Dispatch Management System 跨站脚本漏洞

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. rescue dispatch management system is vulnerable to a cross-site scripting vulnerability that could be exploited to inject malicious JavaScript programs, steal other user cookies, etc...

5.4CVSS5.2AI score0.00206EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/05/01 6:42 p.m.17 views

Robocode Arbitrary Code Execution

The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...

6.8CVSS7.7AI score0.0082EPSS
Exploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/21 5:19 p.m.3 views

CVE-2022-24272

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6...

6.5CVSS6.6AI score0.00458EPSS
Exploits2References2Affected Software1
OSV
OSV
added 2022/04/21 11:15 a.m.1 views

UBUNTU-CVE-2022-24272

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6...

6.5CVSS5.8AI score0.00458EPSS
Exploits2References3
Prion
Prion
added 2022/04/21 11:15 a.m.19 views

Input validation

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6...

4CVSS6.4AI score0.00458EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2022/04/21 10:45 a.m.17 views

CVE-2022-24272 MongoDB Server (mongod) may crash in response to unexpected requests

An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6...

6.5CVSS6.7AI score0.00458EPSS
Exploits2References1
Krebs on Security
Krebs on Security
added 2022/02/22 4:18 p.m.22 views

Report: Missouri Governor’s Office Responsible for Teacher Data Leak

Missouri Governor Mike Parson made headlines last year when he vowed to criminally prosecute a journalist for reporting a security flaw in a state website that exposed personal information of more than 100,000 teachers. But Missouri prosecutors now say they will not pursue charges following...

0.6AI score
Exploits0
OSV
OSV
added 2021/12/19 7:42 p.m.13 views

GSD-2021-1002549 blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release()

blk-mq: cancel blk-mq dispatch work in both blkcleanupqueue and diskrelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

7.2AI score
Exploits0
Rows per page
Query Builder