Lucene search
+L

7583 matches found

CNNVD
CNNVD
added 2023/04/02 12:00 a.m.9 views

SourceCodester Employee Payslip Generator 跨站脚本漏洞

Employee Payslip Generator is an employee payslip generator by Carlo Montero Personal Developer. A security vulnerability exists in SourceCodester Employee Payslip Generator version 1.0, which originates from an unknown function in the file /classes/Master.php?f=saveposition of the component Crea...

5.4CVSS4.4AI score0.00539EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/02 12:00 a.m.8 views

PT-2023-17254 · Sourcecodester · Sourcecodester Employee Payslip Generator

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Payslip Generator version 1.0 Description: A problematic vulnerability has been found in the Create News Handler component of the SourceCodester Employee Payslip Generator. The issue is related to an unknown function o...

5.4CVSS4.1AI score0.00539EPSS
SaveExploits1References5
OSV
OSV
added 2023/03/31 12:15 p.m.12 views

CVE-2023-1770

A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affected by this vulnerability is the function getscale of the file Master.php. The manipulation of the argument perc leads to sql injection. The attack can be launched remotely. Th...

9.8CVSS6.5AI score0.00738EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/03/31 12:00 a.m.12 views

PT-2023-17231 · Unknown · Sourcecodester Grade Point Average Gpa Calculator

Name of the Vulnerable Software and Affected Versions: SourceCodester Grade Point Average GPA Calculator version 1.0 Description: A vulnerability was found in the function get scale of the file Master.php. The manipulation of the argument perc leads to cross site scripting. The attack may be...

6.1CVSS6.3AI score0.00549EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/03/31 12:00 a.m.7 views

Grade Point Average GPA Calculator 跨站脚本漏洞

Grade Point Average GPA Calculator is an online and automated platform for calculating a student's Grade Point Average or GPA using the Bootstrap framework. A security vulnerability exists in SourceCodester Grade Point Average GPA Calculator version 1.0, which stems from a security issue in the...

6.1CVSS4.6AI score0.00549EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2023/03/31 12:00 a.m.19 views

Fedora: Security Advisory for redis (FEDORA-2023-86068d1187)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.54978EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/30 2:34 p.m.77 views

CVE-2023-25076

CVE-2023-25076 affects sniproxy: a buffer overflow in the handling of wildcard backend hosts can allow arbitrary code execution via crafted HTTP or TLS packets. Impact observed in SNIProxy 0.6.0-2 and the master branch. Exploitation details are not provided in the Initial description, but multipl...

9.8CVSS9.5AI score0.65753EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/30 12:00 a.m.7 views

PT-2023-19917 · Sniproxy +2 · Sniproxy +2

Name of the Vulnerable Software and Affected Versions: SNIProxy versions 0.6.0-2 through the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba Description: A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy. A specially crafted HTTP or TLS...

9.8CVSS9.7AI score0.65753EPSS
SaveExploits1References29
BDU FSTEC
BDU FSTEC
added 2023/03/30 12:00 a.m.13 views

The vulnerability of the ntfs_read_mft() function in the kernel module fs/ntfs3/inode.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ntfsreadmft function in the fs/ntfs3/inode.c file of the Linux kernel is related to the lack of checks for valid attribute sizes. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.5AI score0.00266EPSS
SaveExploits0References23Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/30 12:00 a.m.7 views

The vulnerability of the ntfs_read_mft() function in the fs/ntfs3/inode.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ntfsreadmft function in the fs/ntfs3/inode.c file of the Linux kernel is related to the lack of checks for valid attribute sizes. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

7.8CVSS7.1AI score0.00264EPSS
SaveExploits0References25Affected Software4
ICS
ICS
added 2023/03/29 4:33 p.m.102 views

Delta Electronics InfraSuite Device Master

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: InfraSuite Device Master Vulnerabilities: Deserialization of Untrusted Data, Improper Access Control, Exposed Dangerous Method or Function, Path Traversal, Improper...

9.8CVSS9.9AI score0.5005EPSS
SaveExploits3References7
OSV
OSV
added 2023/03/29 10:15 a.m.6 views

CVE-2023-1689

A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0. This vulnerability affects unknown code of the file Master.php?a=saveearning. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The...

6.1CVSS3.9AI score0.00363EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/29 9:15 a.m.8 views

CVE-2023-1688

A vulnerability classified as problematic has been found in SourceCodester Earnings and Expense Tracker App 1.0. This affects an unknown part of the file Master.php?a=saveexpense. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely...

6.1CVSS4AI score0.00363EPSS
SaveExploits0References2
CNVD
CNVD
added 2023/03/29 12:00 a.m.62 views

Delta Electronics InfraSuite Device Master Authentication Error Vulnerability

Delta Electronics InfraSuite Device Master is Delta Electronics' device for simplifying and automating critical equipment monitoring. An authentication error vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.5, which can be exploited by an attacker to achiev...

9.8CVSS10AI score0.01079EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/03/29 12:00 a.m.34 views

Delta Electronics InfraSuite Device Master Command Injection Vulnerability

Delta Electronics InfraSuite Device Master is Delta Electronics' device for simplifying and automating critical equipment monitoring. A command injection vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.5, which can be exploited by an attacker to inject...

8.8CVSS9AI score0.01583EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/03/29 12:00 a.m.49 views

Unspecified Vulnerability in Delta Electronics InfraSuite Device Master

Delta Electronics InfraSuite Device Master is Delta Electronics' device for simplifying and automating critical equipment monitoring. A security vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.5, which can be exploited by an attacker to remotely execute...

8.8CVSS8.6AI score0.00835EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/03/29 12:00 a.m.34 views

Delta Electronics InfraSuite Device Master Authentication Error Vulnerability

Delta Electronics InfraSuite Device Master is Delta Electronics' device for simplifying and automating critical equipment monitoring. An authentication error vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.5, which can be exploited by an attacker to genera...

9.8CVSS8AI score0.00736EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/03/29 12:00 a.m.30 views

Delta Electronics InfraSuite Device Master Access Control Error Vulnerability (CNVD-2023-23886)

Delta Electronics InfraSuite Device Master is Delta Electronics' device for simplifying and automating critical equipment monitoring. An Access Control Error vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.5, which can be exploited by an attacker to extrac...

8.8CVSS7.6AI score0.0055EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/03/29 12:00 a.m.52 views

Delta Electronics InfraSuite Device Master Path Traversal Vulnerability

Delta Electronics InfraSuite Device Master is Delta Electronics' device for simplifying and automating critical equipment monitoring. A path traversal vulnerability in Delta Electronics InfraSuite Device Master versions prior to 1.0.5 can be exploited by an attacker to cause an elevation of...

9.8CVSS8.6AI score0.0109EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/03/29 12:00 a.m.29 views

Delta Electronics InfraSuite Device Master Deserialization Vulnerability

Delta Electronics InfraSuite Device Master is Delta Electronics' device for simplifying and automating critical equipment monitoring. A deserialization vulnerability in Delta Electronics InfraSuite Device Master versions prior to 1.0.5 can be exploited by an attacker to deserialize a request prio...

7.8CVSS7.9AI score0.00314EPSS
SaveExploits0References1
Rows per page
Query Builder