Lucene search
+L

7936 matches found

CNVD
CNVD
added 2021/08/17 12:00 a.m.17 views

MAC1100 PLC Denial of Service Vulnerability

The MAC1100 PLC is an industrial control product PLC. A security vulnerability exists in the MAC1100 PLC that can be exploited by an attacker to cause a persistent denial of service DOS via a crafted package...

7.8CVSS7.3AI score0.01287EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/08/16 2:15 p.m.33 views

CVE-2021-38757

Persistent cross-site scripting XSS in Hospital Management System targeted towards web admin through contact.php...

6.1CVSS6.3AI score0.00876EPSS
SaveExploits2References3
CVE
CVE
added 2021/08/16 1:53 p.m.106 views

CVE-2021-38757

CVE-2021-38757 is a reported persistent cross-site scripting (XSS) vulnerability in a Hospital Management System (often referenced as PHPGurukul/Hospital Management System). The public descriptions consistently state that the XSS is targeted at the web admin via the contact.php endpoint. Exploit ...

6.1CVSS6AI score0.00876EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2021/08/16 1:53 p.m.58 views

CVE-2021-38756

CVE-2021-38756: Persistent cross-site scripting in Hospital Management System (PHPGurukul) via prescribe.php affecting web admin. Descriptions indicate the vulnerability enables execution of JavaScript through input on prescribe.php; root cause not explicitly stated in provided documents. CVSS sc...

6.1CVSS6AI score0.00717EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/08/13 4:08 p.m.61 views

CVE-2020-18757

The CVE-2020-18757 entry concerns Dut Computer Control Engineering Co.’s MAC1100 PLC. Affected component: MAC1100 PLC; vulnerability type: denial of service; root cause described as a crafted packet that allows an attacker to cause a persistent DOS condition. Across connected sources (Red Hat adv...

7.8CVSS7.2AI score0.01287EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/08/13 4:08 p.m.30 views

CVE-2020-18757

An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to cause persistent denial of service DOS via a crafted packet...

7.3AI score0.01287EPSS
SaveExploits1References1
Oracle linux
Oracle linux
added 2021/08/12 12:00 a.m.89 views

389-ds:1.4 security and bug fix update

1.4.3.16-19 - Bump version to 1.4.3.16-19 - Resolve: Bug 1984091 - persistent search returns entries even when an error is returned by content-sync-plugin 1.4.3.16-18 - Bump version to 1.4.3.16-18 - Resolve: Bug 1983121 - CRYPT password hash with asterisk allows any bind attempt to succeed...

6.5CVSS2.3AI score0.01463EPSS
SaveExploits0
OSV
OSV
added 2021/08/11 1:15 p.m.8 views

CVE-2021-0083

Improper input validation in some IntelR OptaneTM PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable denial of service via local access...

4.4CVSS5.8AI score0.00224EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/04 10:20 p.m.243 views

CVE-2021-3539

CVE-2021-3539 affects EspoCRM 6.1.6 and earlier, with a persistent (type II) cross-site scripting (XSS) vulnerability in handling user-supplied avatar images. The issue is fixed in version 6.1.7. The connected documents corroborate the vulnerability and the fix; no exploit details are provided. R...

6.3CVSS5.8AI score0.00583EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2021/08/04 6:15 p.m.31 views

CVE-2021-32793

Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the function to add domains to blocklists or allowlists is vulnerable to a stored cross-site-scripting vulnerability. User input added ...

5.7CVSS0.00791EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/08/04 12:00 a.m.36 views

Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2021-63798)

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by an attacker to cause a persistent DOS...

5.5CVSS4.1AI score0.00102EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/08/03 5:20 p.m.34 views

CVE-2021-22419

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to cause persistent dos...

5.7AI score0.00102EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/03 5:20 p.m.56 views

CVE-2021-22419

HarmonyOS contains an Insufficient Verification of Data Authenticity vulnerability (CVE-2021-22419) that could allow local attackers to cause a persistent denial of service. The issue is described across multiple sources as a HarmonyOS component flaw leading to DoS, with local access required and...

5.5CVSS5.3AI score0.00102EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/08/03 12:00 a.m.8 views

Fortinet FortiSandbox 缓冲区错误漏洞

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet, a US-based company. The appliance offers dual sandboxing technology, a dynamic threat intelligence system, a real-time control panel and reporting, etc. The Fortinet FortiSandbox is vulnerable to a buff...

8.8CVSS6.6AI score0.00768EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2021/07/27 1:01 p.m.113 views

Several Bugs Found in 3 Open-Source Software Used by Several Businesses

Cybersecurity researchers on Tuesday disclosed nine security vulnerabilities affecting three open-source projects — EspoCRM, Pimcore, and Akaunting — that are widely used by several small to medium businesses and, if successfully exploited, could provide a pathway to more sophisticated attacks. A...

9.1CVSS7.8AI score0.01499EPSS
SaveExploits8
Cvelist
Cvelist
added 2021/07/25 8:08 p.m.35 views

CVE-2021-37470

In NCH WebDictate v2.13, persistent Cross Site Scripting XSS exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript...

5.5AI score0.00585EPSS
SaveExploits1References2
CVE
CVE
added 2021/07/25 8:08 p.m.73 views

CVE-2021-37470

CVE-2021-37470 : In NCH WebDictate v2.13, a persistent Cross-Site Scripting (XSS) flaw exists in the Recipient Name field. An authenticated user can modify this field to inject arbitrary JavaScript, enabling script execution associated with the user’s session. Documented references confirm the vu...

5.4CVSS5.2AI score0.00585EPSS
SaveExploits1References2Affected Software1
Github Security Blog
Github Security Blog
added 2021/07/22 7:37 p.m.60 views

Cross-Site Scripting in Backend Grid View

Problem Failing to properly encode settings for backend layouts, the corresponding grid view is vulnerable to persistent cross-site scripting. A valid backend user account is needed to exploit this vulnerability. Solution Update to TYPO3 versions 8.7.41 ELTS, 9.5.28, 10.4.18, 11.3.1 that fix the...

6.4CVSS2.9AI score0.00603EPSS
SaveExploits0References6Affected Software2
OSV
OSV
added 2021/07/22 7:36 p.m.26 views

GHSA-6MH3-J5R5-2379 Cross-Site Scripting in Query Generator & Query View

Meta CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C 4.5 Problem Failing to properly encode error messages, the components QueryGenerator and QueryView are vulnerable to both reflected and persistent cross-site scripting. A valid backend user account having administrator privileg...

6.4CVSS5.3AI score0.00598EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2021/07/22 7:36 p.m.67 views

Cross-Site Scripting in Query Generator & Query View

Meta CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C 4.5 Problem Failing to properly encode error messages, the components QueryGenerator and QueryView are vulnerable to both reflected and persistent cross-site scripting. A valid backend user account having administrator privileg...

6.4CVSS1.7AI score0.00598EPSS
SaveExploits0References7Affected Software2
Rows per page
Query Builder