Lucene search
+L

86 matches found

Mend
Mend
•added 2022/12/09 8:11 p.m.•21 views

CVE-2022-46166

Spring boot admins is an open source administrative user interface for management of spring boot applications. All users who run Spring Boot Admin Server, having enabled Notifiers e.g. Teams-Notifier and write access to environment variables via UI are affected. Users are advised to upgrade to th...

9.8CVSS0.01567EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/09 12:00 a.m.•6 views

CVE-2022-46166: Improper Control of Generation of Code

Spring boot admins is an open source administrative user interface for management of spring boot applications. All users who run Spring Boot Admin Server, having enabled Notifiers e.g. Teams-Notifier and write access to environment variables via UI are affected. Users are advised to upgrade to th...

9.8CVSS5.7AI score0.01567EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/12/09 12:00 a.m.•68 views

Spring-Boot-Admin code injection vulnerability

spring-boot-admin is an open source based on Spring boot Mybatis backend management system , with user management , menu management and role management 3 functions , permission control to the button level . A code injection vulnerability exists in spring-boot-admin versions prior to 2.6.10 and...

9.8CVSS8.4AI score0.01567EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/11/30 12:00 a.m.•6 views

PT-2024-11854

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the issue introduced in commit f3f0e1d2150b and exacerbated in commit 27e1f8273113 Description The issue is related to the Linux kernel's mm/khugepaged component, where code...

9.1CVSS5.7AI score0.00251EPSS
SaveExploits0
attackerkb
attackerkb
•added 2022/08/15 11:15 p.m.•15 views

CVE-2022-38358

Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to cross-site scripting attacks at /module/adminnotifiers/rules.php and /module/reportevent/indext.php via the parameters rulenotification, rulename, and rulenameold, and at...

6.1CVSS5.6AI score0.00626EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/08/15 11:15 p.m.•32 views

CVE-2022-38358

Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to cross-site scripting attacks at /module/adminnotifiers/rules.php and /module/reportevent/indext.php via the parameters rulenotification, rulename, and rulenameold, and at...

6.1CVSS5.7AI score0.00626EPSS
SaveExploits1References1
Rows per page
Query Builder