Lucene search
K

335 matches found

CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Q-Free MAXTIME Suite 输入验证错误漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. An input validation error vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from incorrect input validation in ldbMT.so. An attacker exploiting this vulnerability...

5.5CVSS6.4AI score0.005EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Q-Free MAXTIME Suite 访问控制错误漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. An access control error vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from a lack of authentication for critical functions in maxprofile/setup/routes.lua. An...

9.1CVSS6.7AI score0.00786EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions. An attacker could exploit the vulnerability to overwrite sensitive files via a specially crafted HTTP request...

7.2CVSS6.3AI score0.00775EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.1 views

Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions. An attacker could exploit the vulnerability to read sensitive files via a specially crafted HTTP request...

4.9CVSS6.3AI score0.00808EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.1 views

Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions. An attacker could exploit the vulnerability to delete sensitive files via a specially crafted HTTP request...

6.5CVSS6.3AI score0.00991EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions. An attacker could exploit the vulnerability to overwrite sensitive files via a specially crafted HTTP request...

7.2CVSS6.3AI score0.00775EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions. An attacker could exploit the vulnerability to read sensitive files via a specially crafted HTTP request...

4.9CVSS6.3AI score0.00808EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.3 views

Q-Free MAXTIME Suite SQL注入漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A SQL injection vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from the editUserMenu endpoint in maxprofile/menu/model.lua that does not properly handle user inpu...

7.6CVSS8.1AI score0.00603EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.1 views

Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions. An attacker could exploit the vulnerability to overwrite arbitrary files via a specially crafted HTTP request...

7.2CVSS6.5AI score0.02701EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Q-Free MAXTIME Suite 访问控制错误漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. An access control error vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from a lack of authentication for critical functions in maxprofile/menu/routes.lua. An...

9.8CVSS6.6AI score0.01029EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Q-Free MAXTIME Suite 代码问题漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A code issue vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from files uploaded without restrictions on dangerous types. An attacker could exploit the vulnerabili...

8.8CVSS6.8AI score0.00792EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions that stems from the use of weak authentication in the PIN authentication mechanism. An attacker exploiting this...

8.1CVSS6.7AI score0.0084EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.1 views

Q-Free MAXTIME Suite SQL注入漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A SQL injection vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from the editUserGroupMenu endpoint in maxprofile/menu/model.lua that does not properly handle user...

7.6CVSS8.1AI score0.00603EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.1 views

Q-Free MAXTIME Suite 访问控制错误漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. An access control error vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from a lack of authentication for critical functions in maxprofile/guest-mode/routes.lua. A...

9.8CVSS6.6AI score0.01029EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.3 views

Q-Free MAXTIME Suite 访问控制错误漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. An access control error vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from a lack of authentication for critical functions in maxprofile/accounts/routes.lua. An...

9.8CVSS6.8AI score0.01029EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Q-Free MAXTIME Suite 访问控制错误漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. An access control error vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from a lack of authentication for critical functions in maxtime/handleRoute.lua. An attacke...

9.8CVSS6.7AI score0.01029EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.3 views

Q-Free MAXTIME Suite 访问控制错误漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. An access control error vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from a lack of authentication for critical functions in maxprofile/menu/routes.lua. An...

9.8CVSS6.7AI score0.01029EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Q-Free MAXTIME Suite 访问控制错误漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. An access control error vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from a lack of authentication for critical functions in maxprofile/accounts/routes.lua. An...

9.8CVSS6.8AI score0.01029EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.3 views

Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from the use of hard-coded encryption keys in JWT signatures. An attacker could exploit the vulnerabilit...

8.8CVSS6.6AI score0.01084EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from the use of a hard-coded password for the root account. An attacker exploiting this vulnerability...

9.8CVSS7.5AI score0.00745EPSS
Exploits0References1
Rows per page
Query Builder