Lucene search
+L

1625 matches found

Positive Technologies
Positive Technologies
•added 2023/11/26 12:00 a.m.•14 views

PT-2023-32600 · Sourcecodester · Sourcecodester Best Courier Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Courier Management System version 1.0 Description: A problematic issue was found, allowing for cross site scripting through the manipulation of the page argument with malicious input, such as alert1. This can be exploited...

6.1CVSS6.5AI score0.00608EPSS
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
•added 2023/11/13 12:00 a.m.•11 views

VulnCheck KEV: CVE-2020-17453

WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter...

6.1CVSS6.4AI score0.26225EPSS
SaveIn wildExploits2References295
OSV
OSV
•added 2023/11/03 12:15 p.m.•13 views

CVE-2023-4591

A local file inclusion vulnerability has been found in WPN-XM Serverstack affecting version 0.8.6, which would allow an unauthenticated user to perform a local file inclusion LFI via the /tools/webinterface/index.php?page parameter by sending a GET request. This vulnerability could lead to the...

9.8CVSS5.7AI score0.00615EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/11/03 12:00 a.m.•18 views

PT-2023-29763 · Unknown · Wpn-Xm Serverstack

Name of the Vulnerable Software and Affected Versions: WPN-XM Serverstack version 0.8.6 Description: A local file inclusion issue has been found, allowing an unauthenticated user to perform a local file inclusion via the "/tools/webinterface/index.php?page" parameter by sending a GET request. Thi...

9.8CVSS9.3AI score0.00615EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/11/02 12:00 a.m.•20 views

PT-2023-30276 · Unknown · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Best Courier Management System version 1.000 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the page parameter in the URL. This is a Cross Site Scripting vulnerability. Recommendations: For...

5.4CVSS5.6AI score0.00676EPSS
SaveExploits1References5
OSV
OSV
•added 2023/10/14 1:15 p.m.•14 views

CVE-2023-5581

A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

6.1CVSS3.9AI score0.00505EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/10/11 12:00 a.m.•21 views

PT-2023-6258 · Yifan · Yifan Yf325

Name of the Vulnerable Software and Affected Versions: Yifan YF325 version 1.0 20221108 Description: A buffer overflow vulnerability exists in the httpd next page functionality, allowing an attacker to execute arbitrary commands by sending a specially crafted network request. The buffer overflow ...

10CVSS9.8AI score0.01018EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2023/09/04 12:00 a.m.•17 views

Inventory Management System Security Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in SourceCodester Inventory Management System version 1.0, which stems from the parameter page in the file index.php that causes the file to be included...

9.8CVSS6.8AI score0.00988EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/09/04 12:00 a.m.•21 views

PT-2023-30466 · Unknown · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file index.php. The manipulation of the page argument leads to file inclusion. This issue can b...

9.8CVSS6.9AI score0.00988EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/08/30 12:00 a.m.•17 views

Tenda AC7 缓冲区错误漏洞

Tenda AC7 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the page parameter of /goform/NatStaticSetting...

9.8CVSS8.8AI score0.00838EPSS
SaveExploits1References2
OSV
OSV
•added 2023/08/16 12:15 p.m.•12 views

CVE-2023-2272

The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the page parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS7.3AI score0.0085EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/16 12:00 a.m.•4 views

CVE-2023-2272: Undefined Security Weakness

The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the page parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS7.1AI score0.0085EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2023/08/07 7:15 p.m.•8 views

CVE-2023-38932

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFilter function...

9.8CVSS7.4AI score0.00955EPSS
SaveExploits1References3
OSV
OSV
•added 2023/08/07 7:15 p.m.•17 views

CVE-2023-38938

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im...

9.8CVSS5.9AI score0.00838EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/08/07 7:15 p.m.•10 views

CVE-2023-38938

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im...

9.8CVSS7.4AI score0.00838EPSS
SaveExploits1References2
NVD
NVD
•added 2023/08/07 7:15 p.m.•37 views

CVE-2023-38938

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im...

9.8CVSS9.8AI score0.00838EPSS
SaveExploits1References1
OSV
OSV
•added 2023/08/07 7:15 p.m.•16 views

CVE-2023-38929

Tenda 4G300 v1.01.42 was discovered to contain a stack overflow via the page parameter at /VirtualSer...

9.8CVSS5.9AI score0.00838EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/08/07 7:15 p.m.•13 views

CVE-2023-38929

Tenda 4G300 v1.01.42 was discovered to contain a stack overflow via the page parameter at /VirtualSer...

9.8CVSS7.4AI score0.00838EPSS
SaveExploits1References2
NVD
NVD
•added 2023/08/07 7:15 p.m.•29 views

CVE-2023-38929

Tenda 4G300 v1.01.42 was discovered to contain a stack overflow via the page parameter at /VirtualSer...

9.8CVSS9.7AI score0.00838EPSS
SaveExploits1References1
Prion
Prion
•added 2023/08/07 7:15 p.m.•31 views

Stack overflow

Tenda 4G300 v1.01.42 was discovered to contain a stack overflow via the page parameter at /VirtualSer...

7.5CVSS9.7AI score0.00838EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder