Lucene search
K

177 matches found

Positive Technologies
Positive Technologies
added 2025/04/03 12:0 a.m.2 views

PT-2025-14576 · Unknown · Code-Projects Bus Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Bus Reservation System version 1.0 Description: A critical issue was found in the Login function of the Login Form component. The manipulation of the Str1 argument leads to a buffer overflow. It is possible to launch the attack ...

7.8CVSS5.2AI score0.00334EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2025/03/25 12:0 a.m.3 views

PT-2025-16744

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A read buffer overflow was possible in the Linux kernel due to the ibmvnic driver printing hex dumps using string formatters. The issue occurred when the buffer size was not a multiple o...

7.1CVSS5.8AI score0.00021EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/13 11:27 p.m.8 views

CVE-2024-35099

TOTOLINK LR350 V9.3.5u.6698B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

9.8CVSS8AI score0.00198EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/10 12:0 a.m.4 views

PT-2025-6118 · Code Projects · Code-Projects Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: code-projects Vehicle Parking Management System version 1.0 Description: A critical issue was found in the Authentication component, specifically affecting the login function. The manipulation of the username argument leads to a stack-based...

7.5CVSS7.5AI score0.00124EPSS
Exploits1References9
RedhatCVE
RedhatCVE
added 2025/02/04 11:6 p.m.6 views

CVE-2024-0799

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin...

9.8CVSS7.2AI score0.37884EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/12/11 12:0 a.m.3 views

PT-2024-35705 · Habitica · Habitica

Name of the Vulnerable Software and Affected Versions: Habitica versions prior to 5.28.5 Description: Habitica is an open-source habit-building program. The issue concerns reflected cross-site scripting vulnerabilities in the login and social media functions within RegisterLoginReset.vue, caused ...

6.2CVSS6.7AI score0.00127EPSS
Exploits1References5
OSV
OSV
added 2024/10/25 2:15 a.m.1 views

CVE-2024-10371

A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the function login of the file main. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used...

9.8CVSS5.9AI score0.00455EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/10/25 12:0 a.m.2 views

PT-2024-16225 · Sourcecodester · Itsourcecode Payroll Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Payroll Management System version 1.0 Description: A critical issue has been found in the login function of the main file, leading to a buffer overflow. The exploit has been disclosed to the public and may be used...

9.8CVSS7.6AI score0.00455EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2024/10/10 12:0 a.m.5 views

PT-2024-39867 · WordPress · Pedalo Connector

Name of the Vulnerable Software and Affected Versions: The Pedalo Connector plugin for WordPress versions up to, and including, 2.0.5 Description: The issue is due to insufficient restriction on the login admin user function, making it possible for unauthenticated attackers to log in as the first...

9.8CVSS7AI score0.14618EPSS
Exploits0References12
Packet Storm
Packet Storm
added 2024/09/24 12:0 a.m.212 views

Car Rental Project 1.0 Code Injection

============================================================================================================================================= | Title : Car Rental Project 1.0 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0...

7.4AI score
Exploits0
OSV
OSV
added 2024/09/22 10:15 p.m.2 views

CVE-2024-9088

A vulnerability has been found in SourceCodester Telecom Billing Management System 1.0 and classified as critical. This vulnerability affects the function login. The manipulation of the argument uname leads to buffer overflow. The exploit has been disclosed to the public and may be used...

9.8CVSS6.8AI score0.00178EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/09/22 10:0 p.m.19 views

CVE-2024-9088 SourceCodester Telecom Billing Management System login buffer overflow

A vulnerability has been found in SourceCodester Telecom Billing Management System 1.0 and classified as critical. This vulnerability affects the function login. The manipulation of the argument uname leads to buffer overflow. The exploit has been disclosed to the public and may be used...

6.3CVSS7.1AI score0.00178EPSS
Exploits1References5
OSV
OSV
added 2024/09/18 8:15 p.m.1 views

CVE-2024-44589

Stack overflow vulnerability in the Login function in the HNAP service in D-Link DCS-960L with firmware 1.09 allows attackers to execute of arbitrary code...

8.8CVSS6AI score
Exploits0References2
NVD
NVD
added 2024/09/18 8:15 p.m.20 views

CVE-2024-44589

Stack overflow vulnerability in the Login function in the HNAP service in D-Link DCS-960L with firmware 1.09 allows attackers to execute of arbitrary code...

8.8CVSS0.00458EPSS
Exploits1References2
CVE
CVE
added 2024/09/18 12:0 a.m.49 views

CVE-2024-44589

CVE-2024-44589 is a stack-overflow in the Login function of the HNAP service on the D-Link DCS-960L (firmware 1.09) that allows arbitrary code execution. Affected component: HNAP Login handler; root cause: stack overflow. Impact: high (remote code execution). Exploitation details are not provided...

8.8CVSS7.8AI score0.00458EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2024/09/05 4:15 p.m.23 views

CVE-2023-51712

An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function...

4.7CVSS0.00155EPSS
Exploits0References2
OSV
OSV
added 2024/09/05 4:15 p.m.17 views

CVE-2023-51712

An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function...

4.7CVSS6.6AI score0.00155EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/09/05 12:0 a.m.17 views

CVE-2023-51712

An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function...

6.9AI score0.00155EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/09/05 12:0 a.m.17 views

CVE-2023-51712

An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function...

0.00155EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2024/09/05 12:0 a.m.14 views

CVE-2023-51712

An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function...

4.7CVSS5.3AI score0.00155EPSS
Exploits0
Rows per page
Query Builder