Lucene search
+L

1126 matches found

CNNVD
CNNVD
added 2024/03/27 12:00 a.m.13 views

Tenda FH1203 安全漏洞

Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a stack buffer overflow vulnerability that stems from the page parameter of the fromNatStaticSetting method of the /goform/NatStaticSetting file...

9CVSS8.2AI score0.01573EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:00 a.m.12 views

The vulnerability of the fromDhcpListClient() function (/goform/DhcpListClient) in the Tenda AC15 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromDhcpListClient function /goform/DhcpListClient in the Tenda AC15 router’s software is related to the operation of writing data beyond the buffer in memory when processing the page parameter. Exploiting this vulnerability could allow an attacker to compromise the...

10CVSS7.9AI score0.01315EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/26 12:00 a.m.16 views

PT-2024-22777 · Unknown · Campcodes House Rental Management System

Name of the Vulnerable Software and Affected Versions: Campcodes House Rental Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file index.php. The manipulation of the page argument leads to file inclusion. The attack ca...

9.8CVSS7.1AI score0.00774EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/03/26 12:00 a.m.13 views

House Rental Management System SQL注入漏洞

House Rental Management System is a house rental management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Campcodes House Rental Management System version 1.0, which originates from a SQL injection vulnerability in the parameter page in the file index.php...

9.8CVSS6.2AI score0.00774EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:00 a.m.26 views

The vulnerability of the fromNatStaticSetting() function (/goform/NatStaticSetting) in the Tenda AC18 router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromNatStaticSetting function /goform/NatStaticSetting in the Tenda AC18 router’s microprogramming system is related to the operation that occurs outside the buffer in memory when processing the page parameter. Exploiting this vulnerability can allow an attacker to...

9CVSS5.7AI score0.00776EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2024/03/19 1:15 p.m.12 views

CVE-2023-40279

An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main.do...

7.5CVSS5.8AI score0.0338EPSS
SaveExploits4References2
OSV
OSV
added 2024/03/19 1:15 a.m.18 views

CVE-2023-40280

An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to popup.jsp...

7.5CVSS5.8AI score0.00848EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/19 1:15 a.m.18 views

CVE-2023-40277

An issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting XSS vulnerability has been discovered in the login.jsp message parameter...

6.1CVSS5.7AI score0.0045EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/03/19 12:00 a.m.9 views

OpenClinic GA Security Vulnerability

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management. A security vulnerability exists in OpenClinic GA version 5.247.01, which originates from a directory path traversal attack that can be...

7.5CVSS6.4AI score0.00848EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/19 12:00 a.m.9 views

OpenClinic GA Path Traversal Vulnerability

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management. A security vulnerability exists in OpenClinic GA version 5.247.01, which originates from a directory path traversal attack that can be...

7.5CVSS6.4AI score0.0338EPSS
SaveExploits4References5
Positive Technologies
Positive Technologies
added 2024/03/19 12:00 a.m.13 views

PT-2024-12882 · Unknown · Openclinic Ga

Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.247.01 Description: An issue was discovered in OpenClinic GA, allowing an attacker to perform a directory path traversal via the Page parameter in a GET request to the "main.do" endpoint. Recommendations: For OpenClini...

7.5CVSS7.3AI score0.0338EPSS
SaveExploits4References6
OSV
OSV
added 2024/03/18 2:15 p.m.9 views

CVE-2024-28537

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function...

9.8CVSS5.8AI score0.00776EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/03/18 12:00 a.m.14 views

PT-2024-12883 · Unknown · Openclinic Ga

Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.247.01 Description: An issue was discovered in OpenClinic GA, allowing an attacker to perform a directory path traversal via the Page parameter in a GET request to "popup.jsp". Recommendations: For OpenClinic GA versio...

7.5CVSS7AI score0.00848EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/03/18 12:00 a.m.13 views

Tenda AC18 Security Vulnerability

Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from a stack overflow vulnerability in the page parameter of the fromNatStaticSetting function...

9.8CVSS7.3AI score0.00776EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/03/18 12:00 a.m.20 views

CVE-2024-28537

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function...

7.6AI score0.00776EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/03/07 12:00 a.m.12 views

Online-Book-Store-Website Security Vulnerability

Online-Book-Store-Website is an online bookstore website. A security vulnerability exists in Online-Book-Store-Website version 1.0, which is caused by a business logic error in the productprice parameter of the /shop.php file...

7.5CVSS6.8AI score0.00518EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2024/03/06 1:15 a.m.11 views

CVE-2023-33677

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

7.5CVSS5.8AI score0.00408EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/05 12:00 a.m.23 views

PT-2024-2267 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: The issue is related to a stack overflow vulnerability in the page parameter of the fromNatStaticSetting function, which can be exploited by a remote attacker to impact the confidentiality, integrit...

9.8CVSS7.5AI score0.00776EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/03/04 12:00 a.m.22 views

PT-2024-18961 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best POS Management System version 1.0 Description: A problematic issue affects the processing of the file index.php, where the manipulation of the page argument leads to file inclusion. This issue can be initiated remotely...

4.3CVSS7AI score0.00513EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/03/03 12:00 a.m.14 views

PT-2024-18915 · Sourcecodester · Sourcecodester Insurance Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Insurance Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown processing. The manipulation of the page argument leads to file inclusion. The attack may be initiated...

5.3CVSS5.6AI score0.00607EPSS
SaveExploits0References7
Rows per page
Query Builder