Lucene search
+L

54 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/03 12:00 a.m.•1 views

CVE-2024-25842: Improper Privilege Management

An issue was discovered in Presta World "Account Manager - Sales Representative & Dealers - CRM" prestasalesmanager module for PrestaShop before version 9.0, allows remote attackers to escalate privilege and obtain sensitive information via the uploadLogo and postProcess methods...

7.5CVSS5.9AI score0.0055EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/10/17 5:15 a.m.•9 views

CVE-2023-45375

In the module "PireosPay" pireospay before version 1.7.10 from 01generator.com for PrestaShop, a guest can perform SQL injection via PireosPayValidationModuleFrontController::postProcess...

8.8CVSS7.4AI score0.38201EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/17 12:00 a.m.•3 views

CVE-2023-45375: Improper Neutralization of Special Elements used in an SQL Command

In the module "PireosPay" pireospay before version 1.7.10 from 01generator.com for PrestaShop, a guest can perform SQL injection via PireosPayValidationModuleFrontController::postProcess...

8.8CVSS7.7AI score0.38201EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/10/16 12:00 a.m.•15 views

PT-2023-29532 · Pireospay +1 · Pireospay +1

Name of the Vulnerable Software and Affected Versions: PireosPay versions prior to 1.7.10 Description: A SQL injection issue exists in the PireosPay module for PrestaShop, where a guest can perform SQL injection via the PireosPayValidationModuleFrontController::postProcess function...

8.8CVSS9AI score0.38201EPSS
SaveExploits1References5
OSV
OSV
•added 2023/08/22 7:16 p.m.•3 views

DEBIAN-CVE-2020-19189

Buffer Overflow vulnerability in postprocessterminfo function in tinfo/parseentry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...

6.5CVSS4.8AI score0.02234EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/08/22 12:00 a.m.•9 views

ncurses 缓冲区错误漏洞

ncurses is a character terminal processing library that provides a set of functions that can be called by the user to generate a text-based user interface. A security vulnerability exists in ncurses version 6.1 due to a buffer overflow in the postprocessterminfo method of tinfo/parseentry.c. The...

6.5CVSS6.1AI score0.02234EPSS
SaveExploits1References6
OSV
OSV
•added 2023/06/14 6:15 p.m.•19 views

CVE-2023-31671

PrestaShop postfinance = 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess...

9.8CVSS5.9AI score0.0062EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/06/14 12:00 a.m.•37 views

CVE-2023-31671

PrestaShop postfinance = 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess...

10AI score0.0062EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/06/14 12:00 a.m.•11 views

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts, and product image scaling. A security vulnerability exists in PrestaShop postfinance version 17.1.13 and earlier versions, which stems...

9.8CVSS8.6AI score0.0062EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/14 12:00 a.m.•3 views

CVE-2023-31671: Improper Neutralization of Special Elements used in an SQL Command

PrestaShop postfinance = 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess...

9.8CVSS8.3AI score0.0062EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/05/03 12:00 a.m.•6 views

PT-2019-6430 · Ncurses +3 · Ncurses +3

Name of the Vulnerable Software and Affected Versions: ncurses version 6.1 Description: The issue is related to a Buffer Overflow vulnerability in the postprocess terminfo function in tinfo/parse entry.c. This vulnerability allows remote attackers to cause a denial of service via crafted commands...

7.8CVSS4.1AI score0.02234EPSS
SaveExploits1References37
CNVD
CNVD
•added 2017/08/30 12:00 a.m.•21 views

ncurses denial of service vulnerability (CNVD-2017-25656)

ncurses new curses is a library of programs that provides APIs that allow programmers to write text-based user interfaces that are independent of the terminal. A denial of service vulnerability exists in the postprocesstermcap function in parseentry.c in Ncurses, which can be exploited by a remot...

6.5CVSS6.8AI score0.0293EPSS
SaveExploits1References1
OSV
OSV
•added 2017/08/29 6:29 a.m.•9 views

UBUNTU-CVE-2017-13731

There is an illegal address access in the function postprocesstermcap in parseentry.c in ncurses 6.0 that will lead to a remote denial of service attack...

6.5CVSS6.8AI score0.0293EPSS
SaveExploits1References3
OSV
OSV
•added 2017/08/29 6:29 a.m.•7 views

DEBIAN-CVE-2017-13731

There is an illegal address access in the function postprocesstermcap in parseentry.c in ncurses 6.0 that will lead to a remote denial of service attack...

6.5CVSS9AI score0.0293EPSS
SaveExploits1References1
Rows per page
Query Builder