Lucene search
+L

42 matches found

NVD
NVD
•added 2024/05/30 3:15 a.m.•39 views

CVE-2024-5514

MinMax CMS from MinMax Digital Technology contains a hidden administrator account with a fixed password that cannot be removed or disabled from the management interface. Remote attackers who obtain this account can bypass IP access control restrictions and log in to the backend system without bei...

9.8CVSS9.7AI score0.00653EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/05/30 2:14 a.m.•19 views

CVE-2024-5514 MinMax CMS - Hidden Functionality

MinMax CMS from MinMax Digital Technology contains a hidden administrator account with a fixed password that cannot be removed or disabled from the management interface. Remote attackers who obtain this account can bypass IP access control restrictions and log in to the backend system without bei...

9.8CVSS7.2AI score0.00653EPSS
SaveExploits0References4
CVE
CVE
•added 2024/05/30 2:14 a.m.•104 views

CVE-2024-5514

CVE-2024-5514 affects MinMax CMS by MinMax Digital Technology and involves a hidden administrative account with a fixed password that cannot be removed or disabled via the management interface. This allows remote attackers to bypass IP-based access controls and log in to the backend without being...

9.8CVSS9.7AI score0.00653EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/05/30 2:14 a.m.•72 views

CVE-2024-5514 MinMax CMS - Hidden Functionality

MinMax CMS from MinMax Digital Technology contains a hidden administrator account with a fixed password that cannot be removed or disabled from the management interface. Remote attackers who obtain this account can bypass IP access control restrictions and log in to the backend system without bei...

9.8CVSS9.7AI score0.00653EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/05/30 12:00 a.m.•18 views

PT-2024-3984 · Unknown · Minmax Cms

Name of the Vulnerable Software and Affected Versions: MinMax CMS affected versions not specified Description: The issue is related to a hidden administrator account with a fixed password in MinMax CMS. This account cannot be removed or disabled from the management interface, allowing remote...

9.8CVSS7.5AI score0.00653EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/30 12:00 a.m.•5 views

CVE-2024-5514: Use of Hard-coded Credentials

MinMax CMS from MinMax Digital Technology contains a hidden administrator account with a fixed password that cannot be removed or disabled from the management interface. Remote attackers who obtain this account can bypass IP access control restrictions and log in to the backend system without bei...

9.8CVSS8.2AI score0.00653EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•1 views

PT-2022-32443

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.18.12 Description A data-race issue exists in the proc dou8vec minmax function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.13 through...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•1 views

PT-2022-32837

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue is related to data races in the proc douintvec minmax function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•1 views

PT-2022-32662

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue is related to data-races in the proc dou8vec minmax function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•3 views

PT-2022-32449

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to data races in the proc douintvec minmax function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•1 views

PT-2022-32666

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue is related to data races in the proc douintvec minmax function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•2 views

PT-2025-8567

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data-race issue exists in the Linux kernel due to concurrent access of a sysctl variable. This issue can lead to load/store-tearing. The problem arises from the lack of protection for...

4.7CVSS0.00183EPSS
SaveExploits0
CNVD
CNVD
•added 2022/06/16 12:00 a.m.•47 views

MINMAX SQL Injection Vulnerability

MINMAX is a high power density 10W DC-DC converter for space-critical applications from China-based MINMAX. MINMAX is vulnerable to SQL injection, which can be exploited by attackers to cause a sql injection issue through manipulation of the id parameter in /newsDia.php...

8.8CVSS4.2AI score0.00658EPSS
SaveExploits0References1
NVD
NVD
•added 2022/06/07 6:15 p.m.•22 views

CVE-2020-36535

A vulnerability classified as critical has been found in MINMAX. This affects an unknown part of the file /newsDia.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

8.8CVSS0.00658EPSS
SaveExploits0References1
Prion
Prion
•added 2022/06/07 6:15 p.m.•16 views

Sql injection

A vulnerability classified as critical has been found in MINMAX. This affects an unknown part of the file /newsDia.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

6.5CVSS8.9AI score0.00658EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/06/07 12:00 a.m.•14 views

MINMAX SQL注入漏洞

MINMAX is a high power density 10W DC-DC converter for space-critical applications from China-based MINMAX. MINMAX is vulnerable to SQL injection, which can be exploited by attackers to cause a sql injection issue through manipulation of the id parameter in /newsDia.php...

8.8CVSS5.8AI score0.00658EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/06/03 7:10 p.m.•5 views

CVE-2020-36535 MINMAX newsDia.php sql injection

A vulnerability classified as critical has been found in MINMAX. This affects an unknown part of the file /newsDia.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

6.3CVSS9.2AI score0.00658EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/06/03 7:10 p.m.•31 views

CVE-2020-36535 MINMAX newsDia.php sql injection

A vulnerability classified as critical has been found in MINMAX. This affects an unknown part of the file /newsDia.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

6.3CVSS9AI score0.00658EPSS
SaveExploits0References1
CVE
CVE
•added 2022/06/03 7:10 p.m.•60 views

CVE-2020-36535

MINMAX is affected by an SQL injection vulnerability in the newsDia.php page, triggered by manipulating the id parameter. Multiple connected sources (NVD, Red Hat, CNVD/CNNVD, CVE list, PRION, and others) describe this as a critical flaw that can be exploited remotely, impacting the handling of a...

8.8CVSS7.7AI score0.00658EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/06/03 12:00 a.m.•3 views

PT-2022-8986

Name of the Vulnerable Software and Affected Versions MINMAX affected versions not specified Description A critical issue has been found in MINMAX, affecting an unknown part of the file /newsDia.php. The manipulation of the id argument leads to SQL injection, allowing for remote attacks...

8.8CVSS0.00658EPSS
SaveExploits0References3
Rows per page
Query Builder