Lucene search
+L

1958 matches found

Positive Technologies
Positive Technologies
added 2022/08/22 12:00 a.m.13 views

PT-2022-23255 · Unknown · Bus Pass Management System

Name of the Vulnerable Software and Affected Versions: Bus Pass Management System version 1.0 Description: Multiple SQL injections were detected in the Bus Pass Management System. The issue affects several API endpoints, including "buspassms/admin/view-enquiry.php",...

9.8CVSS9.7AI score0.0119EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/08/21 12:00 a.m.10 views

Bus Pass Management System SQL注入漏洞

Bus Pass Management System is a bus pass management system. A security vulnerability exists in Bus Pass Management System version 1.0, which is caused by multiple SQL injections...

9.8CVSS8.6AI score0.0119EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/08/16 12:00 a.m.10 views

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo version 11.6, which stems from a missing HttpOnly flag in the session cookie and pass cookie, which can disclose sensitive information...

7.5CVSS7.5AI score0.02365EPSS
SaveExploits0References5
The Hacker News
The Hacker News
added 2022/07/26 4:07 p.m.42 views

Experts Find Similarities Between New LockBit 3.0 and BlackMatter Ransomware

Cybersecurity researchers have reiterated similarities between the latest iteration of the LockBit ransomware and BlackMatter, a rebranded variant of the DarkSide ransomware strain that closed shop in November 2021. The new version of LockBit, called LockBit 3.0 aka LockBit Black, was released in...

0.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/07/08 12:00 a.m.55 views

EulerOS 2.0 SP9 : zstd (EulerOS-SA-2022-2017)

According to the versions of the zstd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if ...

8.1CVSS7.9AI score0.01419EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/07/05 2:00 p.m.5 views

CVE-2022-40621

Because the WAVLINK Quantum D4G WN531G3 running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because the hashing mechanism does not rely on a server-supplied key, it is possible for an attacker with sufficient network access to capture the hashed...

7.5CVSS7.1AI score0.00816EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2022/06/21 4:23 p.m.30 views

Security Bulletin: IBM MQ Internet Pass-Thru is vulnerable to an issue within IBM® Runtime Environment Java™ Technology Edition, Version 7. (CVE-2022-21496)

Summary IBM MQ Internet Pass-Thru has addressed the following vulnerability in the IBM® Runtime Environment Java™ Technology Edition, Version 7 used by IBM MQ Internet Pass-Thru. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An unspecified vulnerability in Java SE related to the JNDI...

5.3CVSS6.4AI score0.02752EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/06/21 4:23 p.m.48 views

Security Bulletin: IBM MQ Internet Pass-Thru is vulnerable to an issue within IBM® Runtime Environment Java™ Technology Edition, Version 7. (CVE-2021-35550)

Summary IBM MQ Internet Pass-Thru has addressed the following vulnerability in the IBM® Runtime Environment Java™ Technology Edition, Version 7 used by IBM MQ Internet Pass-Thru. Vulnerability Details CVEID:CVE-2021-35550 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE...

7.1CVSS6.6AI score0.07376EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/06/21 4:22 p.m.58 views

Security Bulletin: IBM MQ Internet Pass-Thru is vulnerable to an issue within IBM® Runtime Environment Java™ Technology Edition, Version 7. (CVE-2021-35603)

Summary IBM MQ Internet Pass-Thru has addressed the following vulnerability in the IBM® Runtime Environment Java™ Technology Edition, Version 7 used by IBM MQ Internet Pass-Thru. Vulnerability Details CVEID: CVE-2021-35603 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE...

4.3CVSS1.2AI score0.04411EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/06/21 4:22 p.m.117 views

Security Bulletin: IBM MQ Internet Pass-Thru is vulnerable to an issue within IBM® Runtime Environment Java™ Technology Edition, Version 7. (CVE-2022-21305, CVE-2022-21291)

Summary IBM MQ Internet Pass-Thru has addressed the following vulnerabilities in the IBM® Runtime Environment Java™ Technology Edition, Version 7 used by IBM MQ Internet Pass-Thru. Vulnerability Details CVEID:CVE-2022-21305 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM...

5.3CVSS6.4AI score0.02896EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/06/14 12:00 a.m.64 views

Samsung Pass licensing issue vulnerability

Samsung Pass is a secure and easy way to log in to websites and applications on cell phones using biometric technology from Samsung of South Korea.An authorization issue vulnerability exists in versions prior to Samsung Pass 4.0.00.33, which stems from improper authorization. An attacker could us...

4.6CVSS3.2AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/07 7:15 p.m.15 views

CVE-2022-30730

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication...

4.6CVSS5.8AI score0.00245EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/07 7:15 p.m.5 views

CVE-2022-30730

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication...

4.6CVSS5.8AI score0.00245EPSS
SaveExploits0References2
NVD
NVD
added 2022/06/07 7:15 p.m.28 views

CVE-2022-30730

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication...

4.6CVSS0.00245EPSS
SaveExploits0References1
Prion
Prion
added 2022/06/07 7:15 p.m.32 views

Authorization

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication...

2.1CVSS4.6AI score0.00245EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/06/07 6:04 p.m.101 views

CVE-2022-30730

Samsung Pass contains an authorization issue in versions prior to 1.0.00.33 that could allow a physical attacker to access the account list without authentication. Affected software is Samsung Pass prior to 1.0.00.33; root cause is improper authorization. Evidence across sources (e.g., PT-2022-20...

4.6CVSS4.5AI score0.00245EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/07 6:04 p.m.36 views

CVE-2022-30730

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication...

4.6CVSS4.9AI score0.00245EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/06/07 12:00 a.m.13 views

Samsung Pass 安全漏洞

Samsung Pass is a secure and easy way to log in to websites and applications on cell phones using biometric technology from Samsung of South Korea.An authorization issue vulnerability exists in versions prior to Samsung Pass 4.0.00.33, which stems from improper authorization. An attacker could us...

4.6CVSS5.6AI score0.00245EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/06/07 12:00 a.m.12 views

PT-2022-20268 · Samsung · Samsung Pass

Name of the Vulnerable Software and Affected Versions: Samsung Pass versions prior to 1.0.00.33 Description: The issue is related to improper authorization, allowing physical attackers to access the account list without authentication. This could potentially expose sensitive information...

4.6CVSS4.3AI score0.00245EPSS
SaveExploits0References4
CNVD
CNVD
added 2022/05/26 12:00 a.m.39 views

Covid-19 Travel Pass Management System SQL Injection Vulnerability (CNVD-2022-68948)

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. It provides an online platform for submitting travel passes within the Covid-19 restrictions. SQL injection vulnerability exists in the Covid-19 Travel Pass Management System v1.0 version, which originates from...

9.8CVSS2.8AI score0.01079EPSS
SaveExploits1References1
Rows per page
Query Builder