Lucene search
+L

263 matches found

BDU FSTEC
BDU FSTEC
added 2022/09/21 12:00 a.m.11 views

The vulnerability of the Login component in the file post_applogin.php is related to the ability to decode the session token of the Syncovery backup tool, which allows a hacker to increase their privileges.

The vulnerability of the Login component in the postapplogin.php file is related to the possibility of decoding the session token of the Syncovery backup tool. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

10CVSS7.7AI score0.04036EPSS
SaveExploits3References4Affected Software1
CNNVD
CNNVD
added 2022/09/05 12:00 a.m.10 views

Clinic’s Patient Management System SQL注入漏洞

Clinic's Patient Management System is a patient management system for Carlo Montero's clinics. A SQL injection vulnerability exists in Clinic's Patient Management System version 1.0 due to unknown functionality in the index.php file of the component Login, where manipulation of the parameter...

9.8CVSS8.3AI score0.00672EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/09/05 12:00 a.m.6 views

PT-2022-20607 · Sourcecodester · Sourcecodester Clinics Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System affected versions not specified Description: A critical issue was found in the Login component of the system, specifically in the file index.php. The user name argument is vulnerable to sql...

9.8CVSS6.8AI score0.00672EPSS
SaveExploits0References4
Prion
Prion
added 2022/08/12 8:15 p.m.24 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associat...

7.5CVSS9.7AI score0.00609EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/08/12 12:00 a.m.9 views

PT-2022-18748 · Unknown · Sourcecodester Automated Beer Parlour Billing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automated Beer Parlour Billing System affected versions not specified Description: A critical issue was found in the Login component, where the manipulation of the username argument leads to SQL injection. This can be initiated...

9.8CVSS9.6AI score0.00609EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/04/07 12:00 a.m.43 views

IBM MQ Appliance Denial of Service Vulnerability (CNVD-2022-36974)

IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM U.S.A. A denial-of-service vulnerability exists in IBM MQ Appliance, which can be exploited by attackers to conduct denial-of-service attacks via the application login component...

5.3CVSS5.4AI score0.01092EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/04/06 3:10 a.m.22 views

Denial Of Service (DoS)

IBM MQ is vulnerable to denial of serviceDOS attacks. The vulnerability exists due to a lack of validation in login component, which allows an attacker to crash the system by dropping the performance...

5.3CVSS3.8AI score0.01092EPSS
SaveExploits0References3Affected Software3
OSV
OSV
added 2022/04/05 5:15 p.m.3 views

CVE-2022-22355

IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance...

5.3CVSS5.8AI score0.01092EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/05 5:15 p.m.27 views

CVE-2022-22355

IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance...

5.3CVSS0.01092EPSS
SaveExploits0References2
Prion
Prion
added 2022/04/05 5:15 p.m.24 views

Design/Logic Flaw

IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance...

5CVSS5.7AI score0.01092EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/04/05 12:00 a.m.8 views

IBM MQ Appliance 安全漏洞

IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM U.S.A. A denial-of-service vulnerability exists in IBM MQ Appliance, which can be exploited by attackers to conduct denial-of-service attacks via the application login component...

5.3CVSS5.6AI score0.01092EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/04/04 12:00 a.m.7 views

CVE-2022-22355

IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance...

5.3CVSS6AI score0.01092EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/01/04 12:00 a.m.9 views

Google Chrome 资源管理错误漏洞

Google Chrome is a Web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which stems from repeated calls to freed resources by the product's login component. A remote attacker could use this vulnerability to create a specially crafted web page, trick a...

8.8CVSS8.9AI score0.01184EPSS
SaveExploits0References15
OSV
OSV
added 2021/09/09 11:15 p.m.17 views

CVE-2020-19281

A stored cross-site scripting XSS vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field...

5.4CVSS5.5AI score
SaveExploits0References2
CNVD
CNVD
added 2021/07/05 12:00 a.m.24 views

Zimbra Collaboration Suite Cross-Site Scripting Vulnerability

Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. A cross-site scripting vulnerability exists in the login component of the web client for Zimbra Collaboration Suite. An attacker could exploit this vulnerability by adding executable...

6.1CVSS6.5AI score0.03298EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/02 6:55 p.m.44 views

CVE-2021-35207

An issue was discovered in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.0 before 9.0.0 Patch 16. An XSS vulnerability exists in the login component of Zimbra Web Client, in which an attacker can execute arbitrary JavaScript by adding executable JavaScript to the loginErrorCode...

7AI score0.03298EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/07/02 12:00 a.m.12 views

Zimbra Collaboration Suite跨站脚本漏洞

Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. A cross-site scripting vulnerability exists in the login component of the web client for Zimbra Collaboration Suite. An attacker could exploit this vulnerability by adding executable...

6.1CVSS5.6AI score0.03298EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:00 a.m.9 views

The vulnerability of the Pre Login component of Oracle FLEXCUBE Direct Banking system allows a perpetrator to modify data or gain privileged access.

The vulnerability of the Pre Login component of the Oracle FLEXCUBE Direct Banking system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to modify data or gain privileged access using network packets...

2.1CVSS6.6AI score0.00611EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/04/21 12:00 a.m.14 views

Unspecified Vulnerability in Oracle FLEXCUBE Direct Banking (CNVD-2021-33850)

Oracle FLEXCUBE Direct Banking enables banks to deliver a tailored, portal-based, rich online customer experience based on demographics and market segments. A security vulnerability exists in the Pre Login component in Oracle FLEXCUBE Direct Banking versions 12.0.2, 12.0.3. An attacker could...

2.1CVSS6.2AI score0.00611EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:00 a.m.10 views

The vulnerability of the central/executar_login.php component of the Mk-Auth authentication software allows a hacker to execute arbitrary SQL queries against the database.

The vulnerability of the central/executarlogin.php component of the Mk-Auth authentication software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database in the target...

9.4CVSS8.2AI score0.01146EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder