Lucene search
+L

2209 matches found

NVD
NVD
•added 2021/10/07 10:15 p.m.•37 views

CVE-2020-21725

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter...

9.8CVSS0.0128EPSS
SaveExploits1References1
OSV
OSV
•added 2021/10/07 10:15 p.m.•17 views

CVE-2020-21725

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter...

9.8CVSS7.3AI score0.0128EPSS
SaveExploits1References1
Prion
Prion
•added 2021/10/07 10:15 p.m.•24 views

Sql injection

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter...

7.5CVSS9.7AI score0.0128EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/10/07 9:28 p.m.•46 views

CVE-2020-21725

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter...

9.8AI score0.0128EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/07 12:00 a.m.•7 views

CVE-2020-21725: Improper Neutralization of Special Elements used in an SQL Command

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter...

9.8CVSS5.9AI score0.0128EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/10/07 12:00 a.m.•13 views

嘉兴想天信息科技 OpenSNS SQL注入漏洞

OpenSNS is a comprehensive social software developed by Thinking Sky. A SQL blind injection vulnerability exists in the pid parameter in /Controller/ChinaCityController.class.php in OpenSNS version 6.1.0. An attacker can exploit this vulnerability to obtain sensitive database information...

9.8CVSS8.6AI score0.0128EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/10/07 12:00 a.m.•5 views

PT-2021-10658

Name of the Vulnerable Software and Affected Versions: OpenSNS version 6.1.0 Description: The issue is a blind SQL injection vulnerability. It is located in the /Controller/ChinaCityController.class.php file and can be exploited via the pid parameter. Recommendations: For OpenSNS version 6.1.0,...

9.8CVSS0.0128EPSS
SaveExploits1References4
NVD
NVD
•added 2021/09/19 5:15 p.m.•39 views

CVE-2021-41073

looprwiter in fs/iouring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORINGOPPROVIDEBUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation...

7.8CVSS0.01774EPSS
SaveExploits3References7
UbuntuCve
UbuntuCve
•added 2021/09/19 5:15 p.m.•71 views

CVE-2021-41073

looprwiter in fs/iouring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORINGOPPROVIDEBUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation...

7.8CVSS6.8AI score0.01774EPSS
SaveExploits3References7
Debian CVE
Debian CVE
•added 2021/09/19 4:02 p.m.•74 views

CVE-2021-41073

looprwiter in fs/iouring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORINGOPPROVIDEBUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation...

7.8CVSS6.8AI score0.01774EPSS
SaveExploits3
Cvelist
Cvelist
•added 2021/09/19 4:02 p.m.•59 views

CVE-2021-41073

looprwiter in fs/iouring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORINGOPPROVIDEBUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation...

7.6AI score0.01774EPSS
SaveExploits3References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/08 12:00 a.m.•4 views

CVE-2021-1904: Incorrect Comparison

Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

6.2CVSS5.6AI score0.00501EPSS
SaveExploits0References2
OSV
OSV
•added 2021/08/27 7:15 p.m.•14 views

CVE-2021-3264

SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php...

7.2CVSS5.8AI score0.00875EPSS
SaveExploits1References1
Prion
Prion
•added 2021/08/27 7:15 p.m.•34 views

Sql injection

SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php...

6.5CVSS7.4AI score0.00875EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/08/27 7:15 p.m.•9 views

CVE-2021-3264

SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php...

7.2CVSS7.1AI score0.00875EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/08/27 12:00 a.m.•2 views

PT-2021-19824

Name of the Vulnerable Software and Affected Versions cxuucms version 3.1 Description The issue is related to a SQL Injection vulnerability. It affects the pid parameter in the "public/admin.php" endpoint. There is no information provided about the estimated number of potentially affected devices...

7.2CVSS0.00875EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/08/27 12:00 a.m.•19 views

Cxuucms SQL注入漏洞

cxuucms is a PHP-based content relationship building system. cxuucms version 3.1 has a SQL injection vulnerability that originates from setting the pid parameter in public/admin.php, which can be exploited by attackers to obtain sensitive database information...

7.2CVSS5.9AI score0.00875EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/27 12:00 a.m.•9 views

CVE-2021-3264: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php...

7.2CVSS5.8AI score0.00875EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/07/27 12:00 a.m.•48 views

Fedora: Security Advisory for systemd (FEDORA-2021-166e461c8d)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.6AI score
SaveExploits0References2
Qualys Blog
Qualys Blog
•added 2021/07/20 12:55 p.m.•385 views

CVE-2021-33910: Denial of Service (Stack Exhaustion) in systemd (PID 1)

The Qualys Research Team has discovered a stack exhaustion denial-of-service vulnerability in systemd, a near-ubiquitous utility available on major Linux operating systems. Any unprivileged user can exploit this vulnerability to crash systemd and hence the entire operating system a kernel panic...

7.2CVSS6.8AI score0.09729EPSS
SaveExploits7
Rows per page
Query Builder