Lucene search
K

9 matches found

CNNVD
CNNVD
added 2024/08/06 12:0 a.m.1 views

PayPal,Credit Card and Debit Card Payment SQL注入漏洞

PayPal,Credit Card and Debit Card Payment is a PayPal, Credit Card and Debit Card Payment software by janobe individual developer. A SQL injection vulnerability exists in PayPal,Credit Card and Debit Card Payment version 1.0. An attacker can use this vulnerability to send a specially crafted quer...

9.8CVSS7.5AI score0.00175EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/12/22 12:0 a.m.4 views

PT-2023-31801 · Unknown · Sandbox Accounts For Events

Name of the Vulnerable Software and Affected Versions: Sandbox Accounts for Events versions prior to 1.10.0 Description: The issue allows authenticated users to potentially read data from the events table by sending request payloads to the "events API", collecting information on planned events,...

7.8CVSS3.5AI score0.00035EPSS
Exploits0References7
OSV
OSV
added 2023/06/26 8:15 p.m.1 views

CVE-2023-34418

A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API...

8.1CVSS7.3AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/06/26 12:0 a.m.2 views

PT-2023-24864 · Lenovo · Lenovo Xclarity Administrator

Name of the Vulnerable Software and Affected Versions: Lenovo XClarity Administrator LXCA affected versions not specified Description: A SQL injection vulnerability in a specific web API may allow a valid, authenticated LXCA user to gain unauthorized access to events and other data stored in LXCA...

8.1CVSS8.2AI score0.0029EPSS
Exploits0References3
OSV
OSV
added 2022/01/07 12:15 a.m.1 views

DEBIAN-CVE-2021-25743

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events...

3CVSS6.3AI score0.00257EPSS
Exploits0References1
NVD
NVD
added 2021/03/18 3:15 p.m.14 views

CVE-2021-24146

Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example...

7.5CVSS0.76464EPSS
Exploits5References2
Prion
Prion
added 2021/03/18 3:15 p.m.14 views

Format string

Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example...

5CVSS7.5AI score0.76464EPSS
Exploits5References2Affected Software1
Veeam
Veeam
added 2017/04/10 12:0 a.m.16 views

'Events data collection failure' Issue

Challenge Veeam ONE raises Events data collection failure against Veeam Backup & Replication or Hyper-V server. Cause Permissions, UAC configuration, and firewall settings need to be configured. Solution Troubleshooting Checks Verify that the account used to connect to Veeam Backup & Replication ...

6.8AI score
Exploits0Affected Software1
CNVD
CNVD
added 2015/03/12 12:0 a.m.1 views

BACnet OPC Server Denial of Service Vulnerability

BACnet OPC Server provides data access, alerts, and access to event and historical data between OPC clients and BACnet-compatible devices. BACnet OPC Server suffers from a format string vulnerability in BACnOPCSever.exe's handling of constructed requests, which can be exploited by an attacker to...

9CVSS7.4AI score0.01564EPSS
Exploits0References1
Rows per page
Query Builder