CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8 matches found

prion•added 2023/08/14 12:15 p.m.•16 views

Sql injection

novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability...

7.5CVSS9.8AI score0.00603EPSS

Exploits0References3Affected Software1

cvelist•added 2023/08/14 12:0 a.m.•16 views

CVE-2023-37847

novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability...

10AI score0.00603EPSS

Exploits0References2

vulnrichment•added 2023/08/14 12:0 a.m.•16 views

CVE-2023-37847

novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability...

8.2AI score0.00603EPSS

Exploits0References2

nvd•added 2022/09/01 3:15 a.m.•30 views

CVE-2022-36671

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API...

7.5CVSS0.00393EPSS

Exploits1References1

prion•added 2022/09/01 3:15 a.m.•20 views

Arbitrary file deletion

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API...

5CVSS7.6AI score0.00393EPSS

Exploits1References1Affected Software1

osv•added 2022/09/01 2:8 a.m.•16 views

CVE-2022-36672

Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. This vulnerability allows attackers to create a custom user session...

9.8CVSS7.1AI score0.00984EPSS

Exploits1References3

cvelist•added 2022/09/01 2:8 a.m.•26 views

CVE-2022-36671

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API...

7.8AI score0.00393EPSS

Exploits1References1

osv•added 2022/09/01 2:8 a.m.•22 views

CVE-2022-36671

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API...

7.5CVSS7.5AI score0.00393EPSS

Exploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by