Lucene search
+L

12044 matches found

BDU FSTEC
BDU FSTEC
added 2022/12/09 12:00 a.m.13 views

The vulnerability of the NDES registration service for Microsoft Windows operating systems allows a hacker to circumvent existing security restrictions and expose the protected information.

The vulnerability of the Network Device Registration Service NDES of Microsoft Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions and disclose sensitive information...

6.8CVSS6.8AI score0.02377EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/12/08 12:00 a.m.7 views

PT-2022-36042 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: A memory leak issue was discovered when a device registration fails. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.11 and is fixe...

7AI score
SaveExploits0References1
Drupal
Drupal
added 2022/12/07 12:00 a.m.21 views

Entity Registration - Moderately critical - Access bypass - SA-CONTRIB-2022-063

This module enables you to create registration entities related to nodes. The module doesn't sufficiently restrict update access to a user's own registrations. This vulnerability is mitigated by the fact that an attacker must have the "update own registration type" permission...

6.5AI score
SaveExploits0References6
OSV
OSV
added 2022/12/05 8:15 p.m.13 views

CVE-2022-43097

Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...

5.4CVSS5.7AI score0.00551EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/05 8:15 p.m.29 views

CVE-2022-43097

Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...

5.4CVSS0.00551EPSS
SaveExploits0References1
Prion
Prion
added 2022/12/05 8:15 p.m.17 views

Cross site scripting

Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...

4.9CVSS5.4AI score0.00551EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/12/05 12:00 a.m.42 views

CVE-2022-43097

Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...

5.6AI score0.00551EPSS
SaveExploits0References1
CVE
CVE
added 2022/12/05 12:00 a.m.59 views

CVE-2022-43097

Phpgurukul User Registration & User Management System v3.0 is affected by multiple stored XSS vulnerabilities in the registration and login forms. The XSS can be triggered via the firstname and lastname parameters. Affected component is the user input handling for registration/login; root cause d...

5.4CVSS5.4AI score0.00551EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/12/05 12:00 a.m.9 views

User Management System 跨站脚本漏洞

User Management System is a Php User Management System using Stored Procedures by Anuj Kumar Personal Developer. A security vulnerability exists in Phpgurukul User Registration & User Management System version v3.0, which can be exploited by an attacker to conduct a cross-site scripting attack vi...

5.4CVSS5.5AI score0.00551EPSS
SaveExploits0References2
NVD
NVD
added 2022/11/30 12:15 p.m.22 views

CVE-2022-4232

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to...

9.8CVSS0.00451EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/30 12:15 p.m.10 views

CVE-2022-4232

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to...

9.8CVSS5.6AI score0.00451EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/30 12:15 p.m.7 views

CVE-2022-4233

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...

6.1CVSS3.8AI score0.00344EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/11/30 12:15 p.m.9 views

CVE-2022-4232

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to...

9.8CVSS5.2AI score0.00451EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/11/30 12:15 p.m.28 views

CVE-2022-4233

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...

6.1CVSS0.00344EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/30 12:15 p.m.22 views

Design/Logic Flaw

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to...

7.5CVSS9.4AI score0.00451EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/11/30 12:15 p.m.30 views

Cross site scripting

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...

5.8CVSS6AI score0.00344EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/11/30 12:00 a.m.14 views

PT-2022-26368 · Sourcecodester · Sourcecodester Event Registration System

Name of the Vulnerable Software and Affected Versions: SourceCodester Event Registration System version 1.0 Description: A vulnerability has been found in the SourceCodester Event Registration System, allowing for cross site scripting through the manipulation of the First Name/Last Name argument ...

6.1CVSS6AI score0.00344EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2022/11/30 12:00 a.m.40 views

CVE-2022-4233 SourceCodester Event Registration System cross site scripting

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...

2.4CVSS6.2AI score0.00344EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/11/30 12:00 a.m.7 views

CVE-2022-4233 SourceCodester Event Registration System cross site scripting

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...

2.4CVSS4.6AI score0.00344EPSS
SaveExploits0References1
CVE
CVE
added 2022/11/30 12:00 a.m.59 views

CVE-2022-4233

SourceCodester Event Registration System 1.0 is affected by CVE-2022-4233 via XSS in the /event/admin/?page=user/list endpoint, triggered by manipulating the First Name/Last Name parameters. The vulnerability enables cross-site scripting and can be exploited remotely. Affected product/issue detai...

6.1CVSS4.8AI score0.00344EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder