Lucene search
+L

4 matches found

OSV
OSV
added 2022/08/23 12:0 a.m.66 views

GHSA-QHM8-69QH-G76J Missing password strength check in notrinos/notrinos-erp

In versions of notrinos/notrinoserp prior to 0.7 new account passwords were missing a password strength check...

7.3CVSS9.5AI score0.0089EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/08/23 12:0 a.m.41 views

Missing password strength check in notrinos/notrinos-erp

In versions of notrinos/notrinoserp prior to 0.7 new account passwords were missing a password strength check...

9.8CVSS9.1AI score0.0089EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/08/22 12:0 a.m.23 views

GHSA-44W5-Q257-8428 Exposure of password hashes in notrinos/notrinos-erp

The AP officers account is authorized to Backup and Restore the Database, Due to this he/she can download the backup and see the password hash of the System Administrator account, The weak hash MD5 of the password can be easily cracked and get the admin password...

8.8CVSS8.7AI score0.01299EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/08/17 9:15 a.m.4 views

CVE-2022-2871

Cross-site Scripting XSS - Stored in GitHub repository notrinos/notrinoserp prior to 0.7...

5.4CVSS5.9AI score0.00634EPSS
SaveExploits1References3
Rows per page
Query Builder