Lucene search
+L

5 matches found

CNNVD
CNNVD
•added 2021/05/24 12:00 a.m.•12 views

Projectsworlds College Management System 跨站请求伪造漏洞

ProjectWorlds College Management System is a college management system. projectWorlds College Management System is vulnerable to cross-site request forgery, which can be exploited by attackers to modify, delete student, faculty, teacher, subject, grade, location, and article data or create new...

6.5CVSS6.3AI score0.00781EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/01/28 12:00 a.m.•24 views

Moodle 信息泄露漏洞

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. An information disclosure vulnerability exists in Moodle 3.10, 3.9 to 3.9.3, 3.8 to 3.8.6, which originates from the disclosure of grad...

4.3CVSS6.7AI score0.00719EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/03/17 12:00 a.m.•6 views

PT-2019-9661

Name of the Vulnerable Software and Affected Versions ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module version 1.05 Description A Denial of Service issue was discovered, allowing an authenticated user to configure invalid network settings. This stops TCP-based...

6.8CVSS0.01571EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/17 12:00 a.m.•14 views

CVE-2018-18881: Undefined Security Weakness

A Denial of Service DOS issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can configure invalid network settings, stopping TCP based communications to the device. A physical factory rese...

6.8CVSS5.7AI score0.01571EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/17 12:00 a.m.•10 views

CVE-2018-18882: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can inject arbitrary script via setup.html in the web interface...

5.4CVSS5.7AI score0.00732EPSS
SaveExploits1References2
Rows per page
Query Builder