Lucene search
+L

4867 matches found

Exploit DB
Exploit DB
added 2021/06/14 12:00 a.m.257 views

Small CRM 3.0 - 'Authentication Bypass' SQL Injection

Exploit Title: Small CRM 3.0 - 'Authentication Bypass' SQL Injection Date: 12/06/2021 Exploit Author: BHAVESH KAUL Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/small-crm-php/ Version: 3.0 Tested on: Server: XAMPP Description Small CRM 3.0 is vulnerable to SQL...

5.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2019:14172-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.5AI score0.17939EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/06/07 12:00 a.m.13 views

Command Execution Vulnerability in DeepSync IPSec VPNs

DeepTrust IPSec VPN provides an all-in-one networking solution for small and medium-sized branches. A command execution vulnerability exists in the DeepSync IPSec VPN, which can be exploited by an attacker to gain control of the server...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2021/06/07 12:00 a.m.15 views

SQL Injection Vulnerability in Seiko Cloud MES (CNVD-2021-43583)

Jinggong Cloud MES, mainly for small and medium-sized manufacturing workshop management, based on industrial Internet, micro-services, cloud computing, Internet of Things, big data technology architecture, to provide low-cost, fast deployment, easy operation and maintenance of SAAS applications...

7.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/06/04 12:00 a.m.10 views

PT-2021-7991 · Libslirp +9 · Libslirp +9

Name of the Vulnerable Software and Affected Versions: libslirp versions prior to 4.6.0 Description: The issue is related to an invalid pointer initialization in the SLiRP networking implementation, specifically in the bootp input function. This could occur when processing a UDP packet smaller th...

8.8CVSS6.1AI score0.03566EPSS
SaveExploits11References410
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:00 a.m.9 views

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

6.5CVSS7.5AI score0.01577EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:00 a.m.9 views

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

6.5CVSS7.5AI score0.01577EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:00 a.m.10 views

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

6.5CVSS7.5AI score0.0166EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:00 a.m.13 views

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

6.5CVSS7.5AI score0.0166EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:00 a.m.10 views

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

6.5CVSS7.5AI score0.01577EPSS
SaveExploits0References2Affected Software6
CNVD
CNVD
added 2021/05/24 12:00 a.m.9 views

Cisco Small Business Input Validation Error Vulnerability (CNVD-2021-37127)

Cisco Small Business is a switch from the American company Cisco Cisco. Cisco Small Business suffers from an Input Validation Error vulnerability that originates from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection for attack...

9CVSS7.2AI score0.0166EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/05/24 12:00 a.m.16 views

Cisco Small Business Input Validation Error Vulnerability

Cisco Small Business is a switch from the American company Cisco Cisco. Cisco Small Business suffers from an Input Validation Error vulnerability that originates from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection for attack...

9CVSS7.2AI score0.01577EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/05/24 12:00 a.m.17 views

Cisco Small Business Input Validation Error Vulnerability (CNVD-2021-37126)

Cisco Small Business is a switch from the American company Cisco Cisco. An input validation error vulnerability exists in the Cisco Small Business product, which results from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection fo...

9CVSS7.1AI score0.0166EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/05/24 12:00 a.m.13 views

Cisco Small Business Input Validation Error Vulnerability (CNVD-2021-37125)

Cisco Small Business is a switch from the American company Cisco Cisco. Cisco Small Business suffers from an Input Validation Error vulnerability that originates from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection for attack...

9CVSS7.2AI score0.0166EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:00 a.m.14 views

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

6.5CVSS7.5AI score0.0166EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:00 a.m.12 views

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

6.5CVSS7.5AI score0.0166EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:00 a.m.10 views

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

6.5CVSS7.5AI score0.0166EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:00 a.m.9 views

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

6.5CVSS7.5AI score0.0166EPSS
SaveExploits0References2Affected Software6
NVD
NVD
added 2021/05/22 7:15 a.m.22 views

CVE-2021-1549

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

9CVSS0.0166EPSS
SaveExploits0References1
NVD
NVD
added 2021/05/22 7:15 a.m.21 views

CVE-2021-1550

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

9CVSS0.0166EPSS
SaveExploits0References1
Rows per page
Query Builder