Lucene search
+L

12021 matches found

CNNVD
CNNVD
added 2022/06/24 12:00 a.m.11 views

Online Student Rate System 安全漏洞

Online Student Rate System is an online grading system for students. An Access Control Error vulnerability exists in Online Student Rate System v1.0, which arises from improper access control and can be exploited by any attacker to register as an administrator without authentication...

9.8CVSS5.6AI score0.02783EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.18 views

The vulnerability of the Intel Setup and Configuration Software (SCS) data collection tool, as well as the configuration tools for the Intel Management Engine BIOS Extension and the Intel Active Management Technology implementation, related to insufficient protection of registration data, allows a perpetrator to disclose protected information.

The vulnerability of the Intel Setup and Configuration Software SCS data collection tool, as well as the configuration tools for the Intel Management Engine BIOS Extension and the Intel Active Management Technology implementation, is related to insufficient protection of registration data...

7.6CVSS5.5AI score0.00251EPSS
SaveExploits0References2Affected Software12
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:12 p.m.8 views

Malicious code in pingone-angular-registration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fd36cbebd01483bfd774db2fd99658fbe6939e416871b3cf3236bffa61edfe0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:12 p.m.13 views

MAL-2022-5338 Malicious code in pingone-angular-registration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fd36cbebd01483bfd774db2fd99658fbe6939e416871b3cf3236bffa61edfe0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
CNVD
CNVD
added 2022/06/20 12:00 a.m.32 views

Student Registration and Fee Payment System SQL Injection Vulnerability

Student Registration and Fee Payment System is a student registration and fee payment management system. student registration and fee payment system v1.0 is vulnerable to SQL injection, which originates from /scms/student. php is missing SQL data filtering and escaping. An attacker could use this...

7.2CVSS2.6AI score0.00956EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/17 6:15 p.m.10 views

CVE-2022-21184

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

5.9CVSS6.2AI score0.0046EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/17 6:15 p.m.19 views

CVE-2022-21184

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

5.9CVSS0.0046EPSS
SaveExploits0References1
Prion
Prion
added 2022/06/17 6:15 p.m.21 views

Information disclosure

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

4.3CVSS5.4AI score0.0046EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/17 5:40 p.m.40 views

CVE-2022-21184

An information disclosure vulnerability exists in the License registration functionality of Bachmann Visutec GmbH Atvise 3.5.4, 3.6 and 3.7. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

5.9CVSS5.6AI score0.0046EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/17 12:00 a.m.13 views

The vulnerability of the Azure SDK for .NET development software package lies in its insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerability of the Azure SDK for .NET development software package lies in the insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

6.8CVSS6.6AI score0.02341EPSS
SaveExploits0References3
NVD
NVD
added 2022/06/16 3:15 p.m.19 views

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

7.2CVSS0.00956EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/16 3:15 p.m.5 views

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

7.2CVSS5.9AI score0.00956EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/16 3:15 p.m.10 views

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

7.2CVSS5.8AI score0.00956EPSS
SaveExploits1References1
Prion
Prion
added 2022/06/16 3:15 p.m.23 views

Sql injection

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

6.5CVSS7.3AI score0.00956EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/06/16 2:49 p.m.78 views

CVE-2022-31908

CVE-2022-31908 affects the Student Registration and Fee Payment System v1.0. The vulnerability is a SQL Injection via the login/registration endpoint at /scms/student.php, caused by missing input data filtering/escaping. This allows an attacker to inject SQL commands and potentially access/modify...

7.2CVSS7.3AI score0.00956EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/16 2:49 p.m.33 views

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

7.7AI score0.00956EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/06/16 12:00 a.m.12 views

Student Registration and Fee Payment System SQL注入漏洞

Student Registration and Fee Payment System is a student registration and fee payment management system. student registration and fee payment system v1.0 is vulnerable to SQL injection, which originates from /scms/student. php is missing SQL data filtering and escaping. An attacker could use this...

7.2CVSS6AI score0.00956EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/06/14 12:00 a.m.11 views

PT-2022-3484 · Unknown · Data Center Expert

Name of the Vulnerable Software and Affected Versions: Data Center Expert versions prior to 7.9.0 Description: The issue is related to insufficient protection of registration data in the Data Center Expert software. This could allow a remote attacker to gain full control over the software. The...

9.8CVSS9.3AI score0.00537EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2022/06/14 12:00 a.m.11 views

PT-2022-10415 · Qualcomm · Snapdragon Mobile +1

Name of the Vulnerable Software and Affected Versions: Snapdragon Connectivity, Snapdragon Mobile affected versions not specified Description: The issue is related to improper serialization of message queue client registration, which can cause a race condition. This condition allows multiple guny...

8.4CVSS6.8AI score0.00148EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/14 12:00 a.m.13 views

The vulnerability of the logging component of Cisco Expressway micro-programming software and the Cisco TelePresence Video Communication Server micro-programming software for call management devices allows a perpetrator to disclose protected information.

The vulnerability of the logging component of Cisco Expressway microprogramming software and the Cisco TelePresence Video Communication Server microprogramming software management device relates to the disclosure of information through registration files. Exploiting this vulnerability can allow a...

4.3CVSS6.5AI score0.00933EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder