Lucene search
+L

20019 matches found

CNNVD
CNNVD
added 2023/11/06 12:0 a.m.9 views

Mitsubishi Electric MELSEC iQ-F series and Mitsubishi Electric MELSEC-F Series Data Forgery Issue Vulnerability

The Mitsubishi Electric MELSEC iQ-F series and Mitsubishi Electric MELSEC-F Series are both products of Mitsubishi Electric Corporation Mitsubishi Electric, Japan. The Mitsubishi Electric MELSEC-F Series is a programmable logic controller, and the Mitsubishi Electric MELSEC-F Series is a basic...

10CVSS6.8AI score0.00748EPSS
SaveExploits0References4
Prion
Prion
added 2023/11/03 12:15 p.m.30 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6...

7.5CVSS9.8AI score0.00862EPSS
SaveExploits1References1Affected Software1
ICS
ICS
added 2023/11/02 6:0 a.m.50 views

Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU Module (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Exploitable remotely/low attack complexity Equipment : MELSEC iQ-F/iQ-R Series Vulnerability : Improper Restriction of Excessive Authentication Attempts 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote...

5.3CVSS5.3AI score0.0095EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/11/02 12:0 a.m.9 views

PT-2023-32423 · Campcodes · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Simple Student Information System version 1.0 Description: A critical issue has been found in the processing of the file /classes/Master.php. The manipulation of the argument f leads to sql injection. The exploit has been disclosed ...

7.5CVSS6.2AI score0.00562EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/11/02 12:0 a.m.9 views

Simple Student Information System SQL Injection Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Simple Student Information System version 1.0, which ste...

7.5CVSS8.1AI score0.00562EPSS
SaveExploits1References4
Openbugbounty
Openbugbounty
added 2023/10/31 6:20 p.m.8 views

f-t-v.de Improper Access Control vulnerability OBB-3770446

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.9AI score
SaveExploits0
NVD
NVD
added 2023/10/31 2:15 p.m.13 views

CVE-2023-25047

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3...

7.2CVSS7.4AI score0.0068EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/31 2:15 p.m.22 views

CVE-2023-25045

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David F. Carr RSVPMaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3...

7.2CVSS7AI score0.0055EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/31 2:15 p.m.22 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David F. Carr RSVPMaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3...

5.8CVSS7.3AI score0.0055EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/10/31 2:15 p.m.19 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3...

5.8CVSS7.3AI score0.0068EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/10/31 1:50 p.m.37 views

CVE-2023-25047

The CVE-2023-25047 entry covers a SQL Injection vulnerability in the WordPress RSVPMaker plugin up to version 9.9.3, caused by improper neutralization of special elements in SQL commands. Public sources (NVD/Wordfence) indicate exploitable under authenticated admin+ context via the delete paramet...

7.2CVSS7.8AI score0.0068EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/31 1:50 p.m.22 views

CVE-2023-25047 WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3...

5.5CVSS7.6AI score0.0068EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/31 1:32 p.m.65 views

CVE-2023-25045

CVE-2023-25045 concerns the WordPress RSVPMaker plugin (

7.2CVSS7.8AI score0.0055EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/10/27 2:15 a.m.30 views

CVE-2023-5814

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=savereminder. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS7.3AI score0.00444EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/10/27 2:0 a.m.14 views

CVE-2023-5814 SourceCodester Task Reminder System sql injection

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=savereminder. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS7.7AI score0.00444EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2023/10/21 12:15 a.m.19 views

CVE-2023-45680

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in startdecoder. In that case the function returns early, the f-commentlist is set to NULL, but f-commentlistlength is not reset. Later in vorbisdeinit it tries to...

5.5CVSS6AI score0.00535EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/10/21 12:0 a.m.17 views

Vulnerability of microprogrammed programmable logic controllers MELSEC-F: related to authentication breaches, allowing attackers to circumvent existing security restrictions

The vulnerability of MELSEC-F programmable logic controllers’ microprogramming software is related to authentication breaches. Exploiting this vulnerability allows an attacker, operating remotely, to circumvent existing security restrictions...

9.4CVSS7.7AI score0.0085EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2023/10/20 11:26 p.m.56 views

CVE-2023-45680

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in startdecoder. In that case the function returns early, the f-commentlist is set to NULL, but f-commentlistlength is not reset. Later in vorbisdeinit it tries to...

5.5CVSS5.3AI score0.00535EPSS
SaveExploits0
CNVD
CNVD
added 2023/10/17 12:0 a.m.14 views

Mitsubishi Electric MELSEC-F Series Authentication Error Vulnerability

Mitsubishi Electric MELSEC-F Series is a basic micro PLC with analog and communication function scalability for industrial control equipment from Mitsubishi Electric Mitsubishi Electric, Japan. An authentication error vulnerability exists in the Mitsubishi Electric MELSEC-F Series, which can be...

9.1CVSS6.9AI score0.0085EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2023/10/16 12:11 p.m.56 views

SpyNote: Beware of This Android Trojan that Records Audio and Phone Calls

The Android banking trojan known as SpyNote has been dissected to reveal its diverse information-gathering features. Typically spread via SMS phishing campaigns, attack chains involving the spyware trick potential victims into installing the app by clicking on the embedded link, according to...

6.4AI score
SaveExploits0
Rows per page
Query Builder