Lucene search
+L

3228 matches found

Prion
Prion
added 2023/01/16 7:15 p.m.21 views

Improper access control

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file inc/class.securelogin.php of the component Password Reset Handler. The manipulation leads to improper access controls. The...

7.5CVSS7.1AI score0.00643EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2023/01/16 6:58 p.m.23 views

CVE-2015-10057 Little Apps Little Software Stats Password Reset class.securelogin.php access control

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file inc/class.securelogin.php of the component Password Reset Handler. The manipulation leads to improper access controls. The...

4.6CVSS9.6AI score0.00643EPSS
SaveExploits0References4
CVE
CVE
added 2023/01/16 6:58 p.m.55 views

CVE-2015-10057

A vulnerability (CVE-2015-10057) affects Little Apps Little Software Stats, specifically the Password Reset Handler component inc/class.securelogin.php. The issue is an improper access control in that file, leading to potential unauthorized access. The documented exploitability is described as di...

9.8CVSS6AI score0.00643EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/16 6:58 p.m.12 views

CVE-2015-10057 Little Apps Little Software Stats Password Reset class.securelogin.php access control

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file inc/class.securelogin.php of the component Password Reset Handler. The manipulation leads to improper access controls. The...

4.6CVSS7AI score0.00643EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/01/16 12:0 a.m.5 views

Little Software Stats 访问控制错误漏洞

Little Software Stats is Little Apps open source a Web application . It provides open source runtime intelligence solutions. Little Apps Little Software Stats has an access control error vulnerability that stems from a security issue in the component Password Reset Handler file...

9.8CVSS5.6AI score0.00643EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/01/16 12:0 a.m.6 views

PT-2023-10236 · Little Apps · Little Apps Little Software Stats

Name of the Vulnerable Software and Affected Versions: Little Apps Little Software Stats versions prior to 0.2 Description: A critical issue was found in the Password Reset Handler component, specifically in the file inc/class.securelogin.php, leading to improper access controls. The complexity o...

9.8CVSS5AI score0.00643EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/01/15 12:0 a.m.7 views

PT-2023-10147 · Unknown · Pointhi Searx Stats

Name of the Vulnerable Software and Affected Versions: pointhi searx stats affected versions not specified Description: A critical issue has been found in pointhi searx stats, affecting some unknown processing of the file cgi/cron.php, leading to sql injection. Recommendations: Apply a patch to f...

9.8CVSS6.2AI score0.00653EPSS
SaveExploits0References6
OSV
OSV
added 2023/01/13 11:5 a.m.12 views

OESA-2023-1035 kernel security update

Security Fixes: An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2CSMBUSBLOCKDATA with the ioctl I2CSMBUS with malicious input data. This flaw allows a local user to crash the system.CVE-2022-2873 An...

8.8CVSS6AI score0.03576EPSS
SaveExploits2References14
CNNVD
CNNVD
added 2023/01/08 12:0 a.m.7 views

joomla_mod_einsatz_stats SQL注入漏洞

joomlamodeinsatzstats is an application of mrtnmtth individual developer. Show Einsatzkomponente data statistics in charts and graphs. An SQL injection vulnerability exists in mrtnmtth joomlamodeinsatzstats versions prior to 0.3, which stems from a problem with the function getStatsByType in the...

9.8CVSS6.5AI score0.00658EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/01/08 12:0 a.m.10 views

PT-2023-10335 · Joomla · Joomla Mod Einsatz Stats

Name of the Vulnerable Software and Affected Versions: joomla mod einsatz stats versions up to 0.2 Description: A critical issue was found, affecting the getStatsByType function in the helper.php file. The manipulation of the year argument leads to SQL injection. Recommendations: For versions up ...

9.8CVSS8.2AI score0.00658EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/01/05 12:0 a.m.9 views

PT-2023-1410 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform affected versions not specified Description: The issue is caused by a buffer overflow due to a buffer copy without checking the size of the input in the modem while receiving the WMI REQUEST STATS CMDID command. Thi...

8.4CVSS7.9AI score0.00116EPSS
SaveExploits0References6
NVD
NVD
added 2022/12/25 11:15 a.m.16 views

CVE-2021-4276

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affected by this issue is the function DSCIOManager::dscimportinputfromsource of the file src/DSCIOManager.cpp. The manipulation leads to sql injection. The attack may be launched remotely...

8.8CVSS0.00603EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/25 11:15 a.m.8 views

CVE-2021-4276

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affected by this issue is the function DSCIOManager::dscimportinputfromsource of the file src/DSCIOManager.cpp. The manipulation leads to sql injection. The attack may be launched remotely...

8.8CVSS7.2AI score
SaveExploits0References3
Prion
Prion
added 2022/12/25 11:15 a.m.18 views

Sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affected by this issue is the function DSCIOManager::dscimportinputfromsource of the file src/DSCIOManager.cpp. The manipulation leads to sql injection. The attack may be launched remotely...

6.5CVSS8.8AI score0.00603EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/25 12:0 a.m.7 views

CVE-2021-4276

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affected by this issue is the function DSCIOManager::dscimportinputfromsource of the file src/DSCIOManager.cpp. The manipulation leads to sql injection. The attack may be launched remotely...

4.1CVSS9.1AI score0.00603EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/12/25 12:0 a.m.19 views

CVE-2021-4276

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affected by this issue is the function DSCIOManager::dscimportinputfromsource of the file src/DSCIOManager.cpp. The manipulation leads to sql injection. The attack may be launched remotely...

4.1CVSS9.1AI score0.00603EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/12/25 12:0 a.m.7 views

PT-2022-11680 · Unknown · Dns-Stats Hedgehog

Name of the Vulnerable Software and Affected Versions: dns-stats hedgehog affected versions not specified Description: A vulnerability was found in dns-stats hedgehog, which has been rated as problematic. The issue affects the function DSCIOManager::dsc import input from source of the file...

8.8CVSS7.3AI score0.00603EPSS
SaveExploits0References7
CVE
CVE
added 2022/12/25 12:0 a.m.67 views

CVE-2021-4276

CVE-2021-4276 affects dns-stats hedgehog. The vulnerability lies in DSCIOManager::dsc_import_input_from_source in src/DSCIOManager.cpp, enabling SQL injection. It is stated that the attack could be launched remotely and an exploit has been disclosed, but the real existence is still doubted in som...

8.8CVSS8.8AI score0.00603EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/16 12:0 a.m.11 views

PT-2022-14777 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write in the thermal cooling device stats update function of thermal sysfs.c due to improper input validation. This could lead to local escalation of privilege in th...

6.7CVSS6.7AI score0.00173EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/14 9:15 p.m.1 views

DEBIAN-CVE-2022-3106

An issue was discovered in the Linux kernel through 5.16-rc6. ef100updatestats in drivers/net/ethernet/sfc/ef100nic.c lacks check of the return value of kmalloc...

5.5CVSS6.6AI score0.00214EPSS
SaveExploits0References1
Rows per page
Query Builder