Lucene search
+L

54 matches found

Cvelist
Cvelist
•added 2024/03/03 12:00 a.m.•29 views

CVE-2024-24302

An issue was discovered in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess method...

7.6AI score0.00934EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/10/17 5:15 a.m.•9 views

CVE-2023-45375

In the module "PireosPay" pireospay before version 1.7.10 from 01generator.com for PrestaShop, a guest can perform SQL injection via PireosPayValidationModuleFrontController::postProcess...

8.8CVSS7.4AI score0.38201EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/17 12:00 a.m.•2 views

CVE-2023-45375: Improper Neutralization of Special Elements used in an SQL Command

In the module "PireosPay" pireospay before version 1.7.10 from 01generator.com for PrestaShop, a guest can perform SQL injection via PireosPayValidationModuleFrontController::postProcess...

8.8CVSS7.7AI score0.38201EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/10/16 12:00 a.m.•15 views

PT-2023-29532 · Pireospay +1 · Pireospay +1

Name of the Vulnerable Software and Affected Versions: PireosPay versions prior to 1.7.10 Description: A SQL injection issue exists in the PireosPay module for PrestaShop, where a guest can perform SQL injection via the PireosPayValidationModuleFrontController::postProcess function...

8.8CVSS9AI score0.38201EPSS
SaveExploits1References5
OSV
OSV
•added 2023/08/22 7:16 p.m.•3 views

DEBIAN-CVE-2020-19189

Buffer Overflow vulnerability in postprocessterminfo function in tinfo/parseentry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...

6.5CVSS4.8AI score0.02234EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/08/22 12:00 a.m.•9 views

ncurses 缓冲区错误漏洞

ncurses is a character terminal processing library that provides a set of functions that can be called by the user to generate a text-based user interface. A security vulnerability exists in ncurses version 6.1 due to a buffer overflow in the postprocessterminfo method of tinfo/parseentry.c. The...

6.5CVSS6.1AI score0.02234EPSS
SaveExploits1References6
OSV
OSV
•added 2023/06/14 6:15 p.m.•19 views

CVE-2023-31671

PrestaShop postfinance = 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess...

9.8CVSS5.9AI score0.0062EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/06/14 12:00 a.m.•37 views

CVE-2023-31671

PrestaShop postfinance = 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess...

10AI score0.0062EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/14 12:00 a.m.•3 views

CVE-2023-31671: Improper Neutralization of Special Elements used in an SQL Command

PrestaShop postfinance = 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess...

9.8CVSS8.3AI score0.0062EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/06/14 12:00 a.m.•11 views

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts, and product image scaling. A security vulnerability exists in PrestaShop postfinance version 17.1.13 and earlier versions, which stems...

9.8CVSS8.6AI score0.0062EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/05/03 12:00 a.m.•6 views

PT-2019-6430 · Ncurses +3 · Ncurses +3

Name of the Vulnerable Software and Affected Versions: ncurses version 6.1 Description: The issue is related to a Buffer Overflow vulnerability in the postprocess terminfo function in tinfo/parse entry.c. This vulnerability allows remote attackers to cause a denial of service via crafted commands...

7.8CVSS4.1AI score0.02234EPSS
SaveExploits1References37
CNVD
CNVD
•added 2017/08/30 12:00 a.m.•21 views

ncurses denial of service vulnerability (CNVD-2017-25656)

ncurses new curses is a library of programs that provides APIs that allow programmers to write text-based user interfaces that are independent of the terminal. A denial of service vulnerability exists in the postprocesstermcap function in parseentry.c in Ncurses, which can be exploited by a remot...

6.5CVSS6.8AI score0.0293EPSS
SaveExploits1References1
OSV
OSV
•added 2017/08/29 6:29 a.m.•9 views

UBUNTU-CVE-2017-13731

There is an illegal address access in the function postprocesstermcap in parseentry.c in ncurses 6.0 that will lead to a remote denial of service attack...

6.5CVSS6.8AI score0.0293EPSS
SaveExploits1References3
OSV
OSV
•added 2017/08/29 6:29 a.m.•7 views

DEBIAN-CVE-2017-13731

There is an illegal address access in the function postprocesstermcap in parseentry.c in ncurses 6.0 that will lead to a remote denial of service attack...

6.5CVSS9AI score0.0293EPSS
SaveExploits1References1
Rows per page
Query Builder