Lucene search
+L

33 matches found

NVD
NVD
added 2023/06/30 4:15 p.m.35 views

CVE-2023-35175

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model...

9.8CVSS9.9AI score0.01849EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/30 4:15 p.m.5 views

CVE-2023-35175

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model...

9.8CVSS5.9AI score
SaveExploits0References1
Prion
Prion
added 2023/06/30 4:15 p.m.30 views

Server side request forgery (ssrf)

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model...

7.5CVSS9.8AI score0.01849EPSS
SaveExploits0References1Affected Software38
Cvelist
Cvelist
added 2023/06/30 3:43 p.m.35 views

CVE-2023-35175

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model...

10AI score0.01849EPSS
SaveExploits0References1
Hewlett-Packard
Hewlett-Packard
added 2023/06/22 12:0 a.m.26 views

Certain HP LaserJet Pro Print Products - Potential Remote Code Execution, Information Disclosure

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model. Update the printer firmware...

9.8CVSS7.7AI score0.01849EPSS
SaveExploits0
OSV
OSV
added 2019/09/10 6:15 p.m.4 views

CVE-2019-11466

In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require credentials on a port earmarked for internal traffic only. This has been remedied in version 6.0.1 and now requires valid credentials to access...

5.3CVSS6AI score0.01106EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/02/04 12:0 a.m.3 views

PT-2019-11269

Name of the Vulnerable Software and Affected Versions: slixmpp versions prior to 1.4.2 Description: The issue is related to an incorrect Access Control vulnerability in the XEP-0223 plugin, specifically in the options profile used for configuring the default access model. This can result in all...

7.5CVSS6.6AI score0.02323EPSS
SaveExploits1References26
n0where
n0where
added 2016/11/03 2:52 a.m.23 views

OS Instrumentation Framework: osquery

OS Instrumentation Framework osquery exposes an operating system as a high-performance relational database. This allows you to write SQL-based queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open...

7.3AI score
SaveExploits0References1
Prion
Prion
added 2009/02/05 12:30 a.m.16 views

Sql injection

SQL injection vulnerability in the Eventing comeventing 1.6.x component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

7.5CVSS9.1AI score0.02043EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2009/02/05 12:30 a.m.18 views

CVE-2009-0421

SQL injection vulnerability in the Eventing comeventing 1.6.x component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

7.5CVSS8.4AI score0.02043EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2009/02/05 12:0 a.m.24 views

CVE-2009-0421

SQL injection vulnerability in the Eventing comeventing 1.6.x component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

8.4AI score0.02043EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2009/01/21 12:0 a.m.33 views

Eventing Component for Joomla! 'catid' Parameter SQLi

The version of the Eventing component for Joomla! running on the remote host is affected by a SQL injection vulnerability in eventing.php due to improper sanitization of user-supplied input to the 'catid' parameter before using it to construct database queries. Regardless of the PHP...

7.5CVSS5.8AI score0.02043EPSS
SaveExploits2References1
Packet Storm
Packet Storm
added 2009/01/16 12:0 a.m.24 views

Joomla Eventing 1.6.x Blind SQL Injection

1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...

0.4AI score
SaveExploits0
Rows per page
Query Builder