Lucene search
+L

13268 matches found

Veracode
Veracode
•added 2022/02/28 6:55 a.m.•28 views

Business Logic Errors

microweber/microweber is vulnerable to business logic errors. The vulnerability exists in updatecart function of CartManager.php due to missing validations which allows an attacker to exploit the flaw...

5.5CVSS4.6AI score0.00654EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/02/28 12:00 a.m.•19 views

The vulnerability of the CmActLicense component in the CodeMeter license management application allows a violator to rename any files at will.

The vulnerability of the CmActLicense component in the CodeMeter license management application is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to rename arbitrary files remotely...

7.5CVSS7.2AI score0.00838EPSS
SaveExploits0References3Affected Software1
Redos
Redos
•added 2022/02/26 12:00 a.m.•35 views

ROS-2-708

2.708 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

8.8CVSS7.7AI score0.03612EPSS
SaveExploits1
NVD
NVD
•added 2022/02/25 9:15 a.m.•17 views

CVE-2022-0746

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

4.3CVSS0.00882EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/02/25 9:15 a.m.•32 views

CVE-2022-0746

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

4.3CVSS5.4AI score0.00882EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2022/02/25 9:15 a.m.•42 views

CVE-2022-0746

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

4.3CVSS5.8AI score0.00882EPSS
SaveExploits1References3
OSV
OSV
•added 2022/02/25 9:15 a.m.•8 views

UBUNTU-CVE-2022-0746

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

4.3CVSS5.7AI score0.00882EPSS
SaveExploits1References4
OSV
OSV
•added 2022/02/25 9:05 a.m.•26 views

CVE-2022-0746 Business Logic Errors in dolibarr/dolibarr

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

4.3CVSS4.5AI score
SaveExploits0References4
CVE
CVE
•added 2022/02/25 9:05 a.m.•125 views

CVE-2022-0746

CVE-2022-0746 affects dolibarr/dolibarr prior to 16.0 and is described as a business-logic error. Connected records (GHSA-8VQ6-5F66-HP3R) indicate that, prior to 16.0, low-privilege users could update their login name, which should be admin-only. The provided documents do not specify a concrete e...

4.3CVSS5.5AI score0.00882EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/02/25 9:05 a.m.•57 views

CVE-2022-0746 Business Logic Errors in dolibarr/dolibarr

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

4.3CVSS4.9AI score0.00882EPSS
SaveExploits1References2
Mend
Mend
•added 2022/02/25 9:05 a.m.•3 views

CVE-2022-0746

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

5.3CVSS0.00882EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2022/02/25 12:00 a.m.•54 views

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-1227)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with...

7.8CVSS6.4AI score0.06902EPSS
SaveExploits2References9
BDU FSTEC
BDU FSTEC
•added 2022/02/25 12:00 a.m.•25 views

The vulnerability of the print spooler daemon on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Print Spooler in operating systems related to the print queue is associated with security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.9AI score0.41007EPSS
SaveExploits4References4
BDU FSTEC
BDU FSTEC
•added 2022/02/25 12:00 a.m.•16 views

The vulnerability of the Azure Data Explorer data analysis service, related to errors in information presentation on the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Azure Data Explorer data analysis service is related to errors in information representation by the user interface. Exploiting this vulnerability may allow attackers to perform spear-phishing attacks remotely...

8.8CVSS6.7AI score0.01558EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/02/25 12:00 a.m.•22 views

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

5.3CVSS6.6AI score0.01573EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/02/25 12:00 a.m.•23 views

The vulnerability of the Windows DWM Core Library on Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Windows DWM Core Library in operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.2AI score0.04196EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/02/25 12:00 a.m.•51 views

ImageMagick code issue vulnerability (CNVD-2022-18008)

Imagemagick Studio ImageMagick is a set of open source image processing software from the American company ImageMagick Studio Imagemagick Studio. The software can read, convert, or write images in a variety of formats.ImageMagick has a security vulnerability that stems from a null pointer...

6.5CVSS2.6AI score0.01894EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2022/02/25 12:00 a.m.•20 views

The vulnerability of the Windows Common Log File System Driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Common Log File System Driver in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.2AI score0.04327EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/02/25 12:00 a.m.•16 views

The vulnerabilities of the `pipe_read` and `pipe_write` functions in the `fs/pipe.c` file of the Linux operating system’s kernel allow attackers to increase their privileges or cause service failures.

The vulnerability of the piperead and pipewrite functions in the fs/pipe.c file of the Linux operating system’s kernel is related to code errors. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service failures...

7.2CVSS7.1AI score0.01395EPSS
SaveExploits3References5Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/25 12:00 a.m.•4 views

CVE-2022-0746: Undefined Security Weakness

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

4.3CVSS5.5AI score0.00882EPSS
SaveExploits1References2
Rows per page
Query Builder