Lucene search
+L

13143 matches found

CNVD
CNVD
•added 2020/03/16 12:00 a.m.•10 views

SQL Injection Vulnerability in Heybbs Micro Community v1.2

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs micro-community v1.2 SQL injection vulnerability, attackers can use the vulnerability to obtain the database sensitive information leakage...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/16 12:00 a.m.•8 views

Heybbs Micro Community v1.2 suffers from SQL injection vulnerability (CNVD-2020-23506)

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs micro-community v1.2 SQL injection vulnerability, the attacker can be the vulnerability to obtain sensitive database information...

7.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/16 12:00 a.m.•8 views

CVE-2020-9519: Undefined Security Weakness

HTTP methods reveled in Web services vulnerability in Micro Focus Service manager server, affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The vulnerability could be exploited to allow exposure of configuration data...

5.3CVSS6AI score0.00862EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/03/16 12:00 a.m.•17 views

Heybbs Micro Community v1.2 suffers from SQL injection vulnerability (CNVD-2020-23507)

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs Micro Community v1.2 has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/03/16 12:00 a.m.•5 views

PT-2020-20709

Name of the Vulnerable Software and Affected Versions Micro Focus Service Manager versions 9.40 through 9.63 Description The issue concerns a Web services vulnerability in the server component, where HTTP methods are revealed, potentially allowing the exposure of configuration data. Recommendatio...

5.3CVSS0.00862EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
•added 2020/03/16 12:00 a.m.•10 views

VulnCheck KEV: CVE-2020-8468

Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components...

8.8CVSS7.8AI score0.06165EPSS
SaveIn wildExploits0References7
VulnCheck KEV
VulnCheck KEV
•added 2020/03/16 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-8467

Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution...

8.8CVSS8.2AI score0.109EPSS
SaveIn wildExploits0References6
Positive Technologies
Positive Technologies
•added 2020/03/16 12:00 a.m.•4 views

PT-2020-6112

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Trend Micro Worry-Free Business Security 10 SP1 affected versions not specified Trend Micro Worry-Free Business Security Service...

7.8CVSS0.00783EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2020/03/16 12:00 a.m.•6 views

PT-2020-1932

Name of the Vulnerable Software and Affected Versions Trend Micro Worry-Free Business Security versions 9.0 through 10.0 Description The issue exists due to insufficient input validation of the TempFileName parameter in the cgiRecvFile.exe executable of Trend Micro Worry-Free Business Security...

9.8CVSS0.04179EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2020/03/16 12:00 a.m.•6 views

PT-2020-20708

Name of the Vulnerable Software and Affected Versions Micro Focus Service Manager Web Tier versions 9.50 through 9.62 Description The issue allows unauthorized access to configuration data due to a login filter vulnerability. This could be exploited to gain access to sensitive configuration files...

5.3CVSS0.00862EPSS
SaveExploits0References4
CNVD
CNVD
•added 2020/03/16 12:00 a.m.•4 views

Shanghai Shangchuang Network Technology Co., Ltd. Ecjia to home H5 micro-mall has information leakage vulnerability

ECJia to home H5 micro mall is a free and open source O2O mobile e-commerce system. Shanghai Shangchuang Network Technology Co., Ltd. Ecjia to home H5 micro-mall there is an information leakage vulnerability, attackers can use the vulnerability caused by sensitive information leakage...

6.6AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/16 12:00 a.m.•12 views

CVE-2020-9518: Undefined Security Weakness

Login filter can access configuration files vulnerability in Micro Focus Service Manager Web Tier, affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow unauthorized access to configuration data...

5.3CVSS6AI score0.00862EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/03/16 12:00 a.m.•14 views

Heybbs Micro Community v1.2 suffers from SQL injection vulnerability (CNVD-2020-23505)

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs Micro Community v1.2 has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.9AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/13 12:00 a.m.•17 views

Trend Micro Password Manager DLL Hijacking Vulnerability (CNVD-2020-21008)

Trend Micro Password Manager is a secure password management solution from Trend Micro. A DLL hijacking vulnerability exists in version 5.0 of Trend Micro Password Manager for Windows platforms, which can be exploited by attackers to elevate privileges...

7.8CVSS7AI score0.00455EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/03/13 12:00 a.m.•18 views

RSLogix 500 SMTP Information Disclosure

The vulnerability of the Simple Mail Transfer Protocol SMTP software from RSLogix 500, as well as the programmable logic controllers MicroLogix 1100 and MicroLogix 1400, is related to the unencrypted storage of critical information. Exploiting this vulnerability allows an attacker to gain access ...

4CVSS5.5AI score0.00415EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
•added 2020/03/13 12:00 a.m.•18 views

Trend Micro Worry-Free Business Security (WFBS) Multiple Vulnerabilities (1114098)

The remote host is running a version of the Trend Micro WFBS which is affected by multiple vulnerabilities. An attacker who has already gained a foothold on the local WFBS server may manipulate configuration variables in order to access files outside of the web root folder or modify HTTP response...

5.7AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2020/03/12 11:15 p.m.•15 views

CVE-2020-8469

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

7.8CVSS7.1AI score0.00455EPSS
SaveExploits0References2
NVD
NVD
•added 2020/03/12 11:15 p.m.•27 views

CVE-2020-8469

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

7.8CVSS7.6AI score0.00455EPSS
SaveExploits0References2
Prion
Prion
•added 2020/03/12 11:15 p.m.•35 views

Design/Logic Flaw

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

6.9CVSS7.6AI score0.00455EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2020/03/12 11:15 p.m.•10 views

CVE-2020-8469

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

7.8CVSS7.4AI score0.00455EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder