Lucene search
+L

3636 matches found

CVE
CVE
added 2018/02/16 2:00 p.m.52 views

CVE-2018-1000065

CVE-2018-1000065 is a rejected/duplicate entry; reference CVE-2018-5381.

8.4AI score
SaveExploits0
OSV
OSV
added 2018/02/15 4:29 p.m.9 views

CVE-2017-15349

Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, V100R005C10, V100R006C00 have a memory lea...

7.5CVSS5.8AI score0.00941EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/30 12:00 a.m.11 views

Netis WF2419 Cross-Site Request Forgery Vulnerability

Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site request forgery vulnerability exists in the Netis WF2419 version 2.2.36123. A remote attacker can exploit this vulnerability to delete the settings of Address Reservation List...

8.8CVSS6.9AI score0.00961EPSS
SaveExploits1References1
OSV
OSV
added 2018/01/29 7:29 p.m.9 views

CVE-2018-6391

A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings...

8.8CVSS5.7AI score0.00961EPSS
SaveExploits1References3
NVD
NVD
added 2018/01/29 7:29 p.m.18 views

CVE-2018-6391

A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings...

8.8CVSS8.7AI score0.00961EPSS
SaveExploits1References3
Prion
Prion
added 2018/01/29 7:29 p.m.23 views

Cross site request forgery (csrf)

A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings...

6.8CVSS8.6AI score0.00961EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2018/01/29 7:00 p.m.54 views

CVE-2018-6391

Netis WF2419 router (firmware 2.2.36123) has a cross-site request forgery vulnerability allowing remote attackers to delete Address Reservation List settings. Root cause: CSRF. Impact is the modification/destruction of router configuration. Exploitation details are not provided in the documents; ...

8.8CVSS8.6AI score0.00961EPSS
SaveExploits1References3Affected Software1
Packet Storm
Packet Storm
added 2018/01/28 12:00 a.m.33 views

Netis-WF2419 Cross Site Request Forgery

Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Date: 28/01/2018 Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123 Tested on: Windows 10 Technical Details & Descriptio...

7.1AI score
SaveExploits0
zdt
zdt
added 2018/01/28 12:00 a.m.24 views

Netis WF2419 Router - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123 Tested on:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2018/01/28 12:00 a.m.39 views

Netis WF2419 Router - Cross-Site Request Forgery

Netis WF2419 Router - Cross-Site Request Forgery Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Date: 28/01/2018 Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123...

0.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/01/15 12:00 a.m.43 views

Fedora 27 : 2:qemu (2017-8db9c497f9)

Fix ppc64 KVM failure bz 1501936 - CVE-2017-15038: 9p: information disclosure when reading extended attributes bz 1499111 - CVE-2017-15268: potential memory exhaustion via websock connection to VNC bz 1496882 ---- qemu-pr-helper didn't work due to a change in the libmultipath/libmpathpersist APIs...

7.5CVSS6.5AI score0.04184EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2018/01/11 4:49 a.m.33 views

CVE-2017-1000500

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-12161. Reason: This candidate is a reservation duplicate of CVE-2017-12161. Notes: All CVE users should reference CVE-2017-12161 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

8.8CVSS8.6AI score0.01159EPSS
SaveExploits0References1
zdt
zdt
added 2018/01/07 12:00 a.m.44 views

Joomla JHotelReservation 6.0.5 SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Joomla JHotelReservation 6.0.5 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.cmsjunkie.com/joomlahotelreservation URL:...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/01/05 12:00 a.m.64 views

Joomla JMultipleHotelReservation 6.0.5 SQL Injection

Title: Joomla JMultipleHotelReservation 6.0.5 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.cmsjunkie.com/joomla-hotel-portal URL: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jmultiplehotelreservation/ Product: 'Joomla...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/01/04 12:00 a.m.67 views

Joomla JHotelReservation 6.0.5 SQL Injection

Title: Joomla JHotelReservation 6.0.5 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.cmsjunkie.com/joomlahotelreservation URL: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jhotelreservation/ Product: 'Joomla JHotelReservation 6.0.5'...

7.1AI score
SaveExploits0
CVE
CVE
added 2018/01/03 9:00 p.m.43 views

CVE-2018-5191

CVE-2018-5191 is a reservation duplicate of CVE-2017-1000479 and not a separate vulnerability entry. CVE-2017-1000479 affects pfSense versions 2.4.1 and lower, exposing a clickjacking vulnerability in the CSRF error page that can lead to privileged code execution because the check occurs before a...

8.7AI score
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2017/12/30 7:29 a.m.2 views

CVE-2017-12812

PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab...

6.1CVSS5.4AI score0.00775EPSS
SaveExploits0References2
OSV
OSV
added 2017/12/14 2:51 p.m.10 views

SUSE-SU-2017:3311-1 Security update for slurm

This update for slurm fixes the following issues: Slurm was updated to 17.02.9 to fix a security bug, bringing new features and bugfixes fate323998 bsc1067580. Security issue fixed: CVE-2017-15566: Fix security issue in Prolog and Epilog by always prepending SPANK to all user-set environment...

7.8CVSS8.8AI score0.006EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2017/11/30 12:00 a.m.61 views

JVN#78501037: Movable Type plugin A-Member and A-Reserve vulnerable to SQL injection

A-Member and A-Reserve provided by ARK-Web co., ltd. are plugins for Movable Type which provide functions to build a membership website or a reservation website. A-Member and A-Reserve contain SQL injection CWE-89 vulnerability due to the issue in processing cookie values. Impact An attacker who...

9.8CVSS9.7AI score0.01142EPSS
SaveExploits0
CVE
CVE
added 2017/11/17 8:00 p.m.59 views

CVE-2017-1000204

CVE-2017-1000204 is rejected; this candidate is a reservation duplicate of CVE-2016-9920 and not an active vulnerability entry.

7.5AI score
SaveExploits1
Rows per page
Query Builder