Lucene search
+L

4767 matches found

CNNVD
CNNVD
added 2022/06/21 12:00 a.m.9 views

Hindu Matrimonial Script 安全漏洞

PHP Matrimonial Script Hindu Matrimonial Script is an online matrimonial service website from PHP Matrimonial Script India. A security vulnerability exists in Hindu Matrimonial Script that stems from improperly managed permissions in /admin/reports.php...

8.8CVSS7.9AI score0.00814EPSS
SaveExploits1References3
OSV
OSV
added 2022/06/20 8:17 p.m.8 views

MAL-2022-1549 Malicious code in bfx-reports-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c91401ae4d7bf54dad96d13c79dbe2470122cd840dc7ebc1abef3273f3c26c7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:17 p.m.5 views

Malicious code in bfx-reports-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c91401ae4d7bf54dad96d13c79dbe2470122cd840dc7ebc1abef3273f3c26c7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:17 p.m.6 views

Malicious code in youtrack-reports-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b732af593b170277e15300a0a934c0b107bb8df0e470062ced5f8076aeef0e0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:17 p.m.9 views

MAL-2022-7367 Malicious code in youtrack-reports-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b732af593b170277e15300a0a934c0b107bb8df0e470062ced5f8076aeef0e0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2022/06/19 12:30 p.m.39 views

Cervantes - Collaborative Platform For Pentesters Or Red Teams Who Want To Save Time To Manage Their Projects, Clients, Vulnerabilities And Reports In One Place

Cervantes is an opensource collaborative platform for pentesters or red teams who want to save time to manage their projects, clients, vulnerabilities and reports in one place. Features OpenSource Multiplatform Multilanguage Team Collaboration BuiltIn dashbaords and analytics Manage your clients...

7.6AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/06/15 2:15 p.m.11 views

CVE-2022-20204

In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.2AI score0.00102EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/15 2:15 p.m.6 views

CVE-2022-20204

In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.4AI score0.00102EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/15 2:15 p.m.26 views

CVE-2022-20204

In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS0.00102EPSS
SaveExploits0References1
Prion
Prion
added 2022/06/15 2:15 p.m.20 views

Design/Logic Flaw

In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

4.6CVSS7.6AI score0.00102EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2022/06/14 9:26 a.m.28 views

hip.fetishp.com Cross Site Scripting vulnerability OBB-2649895

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNNVD
CNNVD
added 2022/06/06 12:00 a.m.6 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which originates in DevicePolicyManagerService.java's registerRemoteBugreportReceivers. Due to the lack of permission checking, a forged error report ma...

7.8CVSS5.7AI score0.00102EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.5 views

CVE-2022-31953

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/viewreport.php?id=...

9.8CVSS7.5AI score0.01137EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/02 2:15 p.m.5 views

CVE-2022-31974

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=reports&date=...

7.2CVSS5.8AI score0.04947EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.4 views

CVE-2022-31974

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=reports&date=...

7.2CVSS7.2AI score0.04947EPSS
SaveExploits1References3
OSV
OSV
added 2022/06/02 2:15 p.m.10 views

CVE-2022-31956

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/managereport.php?id=...

9.8CVSS7.4AI score0.01137EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.4 views

CVE-2022-31956

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/managereport.php?id=...

9.8CVSS7.5AI score0.01137EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/02 2:15 p.m.19 views

Sql injection

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/viewreport.php?id=...

7.5CVSS9.8AI score0.01137EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/06/02 2:15 p.m.25 views

Sql injection

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/managereport.php?id=...

7.5CVSS9.8AI score0.01137EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/06/02 12:00 a.m.7 views

Rescue Dispatch Management System SQL注入漏洞

Rescue Dispatch Management System is a rescue dispatch management system from Carlo Montero's personal developer. v1.0 of Rescue Dispatch Management System is vulnerable to SQL injection, which originates from /rdms/admin/ incidentreports/viewreport.php?id=The page lacks validation for external...

9.8CVSS5.9AI score0.01137EPSS
SaveExploits1References2
Rows per page
Query Builder