Lucene search
+L

3325 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2022/09/08 12:00 a.m.59 views

D-Link DIR-820L Remote Code Execution Vulnerability

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution...

9.8CVSS4.4AI score0.80377EPSS
SaveIn wildExploits1
Positive Technologies
Positive Technologies
added 2022/09/07 12:00 a.m.12 views

PT-2022-24313 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI version 5.8.6 Description: A SQL injection issue was found in Nagios XI via the mib name parameter at the "Manage MIBs" page. Recommendations: For Nagios XI version 5.8.6, avoid using the mib name parameter in the affected page unti...

9.8CVSS9.6AI score0.02616EPSS
SaveExploits0References7
VulnCheck KEV
VulnCheck KEV
added 2022/09/06 12:00 a.m.7 views

VulnCheck KEV: CVE-2022-26258

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution...

9.8CVSS7.7AI score0.80377EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/09/06 12:00 a.m.59 views

Garage Management System client.php跨站脚本漏洞

Garage Management System Cms-Website is a garage management system that helps you manage all your vehicles, cars and motorcycles. A cross-site scripting vulnerability exists in Garage Management System v1.0, which stems from the lack of effective filtering and escaping of user-supplied data in th...

5.4CVSS2AI score0.00554EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/09/05 12:00 a.m.12 views

Clinic’s Patient Management System SQL注入漏洞

Clinic's Patient Management System is a patient management system for Carlo Montero's clinics. A SQL injection vulnerability exists in Clinic's Patient Management System version 1.0 due to unknown functionality in the index.php file of the component Login, where manipulation of the parameter...

9.8CVSS8.3AI score0.00672EPSS
SaveExploits0References3
NVD
NVD
added 2022/09/02 9:15 p.m.46 views

CVE-2022-36639

A stored cross-site scripting XSS vulnerability in /client.php of Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

5.4CVSS0.00554EPSS
SaveExploits1References2
OSV
OSV
added 2022/09/02 9:15 p.m.9 views

CVE-2022-36639

A stored cross-site scripting XSS vulnerability in /client.php of Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

5.4CVSS6.2AI score0.00554EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/09/02 9:15 p.m.5 views

CVE-2022-36639

A stored cross-site scripting XSS vulnerability in /client.php of Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

5.4CVSS6.2AI score0.00554EPSS
SaveExploits1References3
OSV
OSV
added 2022/09/02 5:15 a.m.15 views

CVE-2022-36637

Garage Management System v1.0 was discovered to contain a persistent cross-site scripting XSS vulnerability via the brandname parameter at /brand.php...

5.4CVSS5.7AI score0.00554EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/09/02 12:00 a.m.13 views

Garage Management System 跨站脚本漏洞

Garage Management System is a garage management system that helps you manage all your vehicles, cars and motorcycles. A cross-site scripting vulnerability exists in Garage Management System v1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the brandname...

5.4CVSS6.2AI score0.00554EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/08/29 5:42 a.m.47 views

CVE-2022-36194

Centreon 22.04.0 is vulnerable to Cross Site Scripting XSS from the function Pollers Broker Configuration by adding a crafted payload into the name parameter...

5.4AI score0.00932EPSS
SaveExploits4References2
OSV
OSV
added 2022/08/29 5:42 a.m.25 views

CVE-2022-36194

Centreon 22.04.0 is vulnerable to Cross Site Scripting XSS from the function Pollers Broker Configuration by adding a crafted payload into the name parameter...

5.9AI score
SaveExploits0References4
OSV
OSV
added 2022/08/26 7:15 p.m.10 views

CVE-2022-36529

Kensite CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities via the name and oldname parameters at /framework/mod/db/DBMapper.xml...

8.8CVSS5.8AI score0.01006EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/26 7:15 p.m.9 views

CVE-2022-36529

Kensite CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities via the name and oldname parameters at /framework/mod/db/DBMapper.xml...

8.8CVSS7.4AI score0.01006EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/08/25 10:15 p.m.5 views

CVE-2022-36715

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php...

9.8CVSS7.4AI score0.00893EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/25 10:15 p.m.17 views

Sql injection

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php...

7.5CVSS9.7AI score0.00893EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/25 9:55 p.m.29 views

CVE-2022-36715

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php...

10AI score0.00893EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/25 3:15 p.m.6 views

CVE-2022-37079

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

7.8CVSS7.1AI score0.01245EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/25 2:15 p.m.7 views

CVE-2022-37076

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile...

7.8CVSS7.1AI score0.01046EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/25 2:15 p.m.13 views

CVE-2022-37076

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile...

7.8CVSS5.8AI score0.01046EPSS
SaveExploits1References1
Rows per page
Query Builder