Lucene search
+L

3348 matches found

CNVD
CNVD
•added 2022/10/31 12:00 a.m.•22 views

Logical flaws in the internship training management system of Beijing Century Super Star Information Technology Development Co.

Beijing Century Super Star Information Technology Development Co., Ltd. is an education informatization enterprise driven by technology, product and service innovation. There is a logic flaw vulnerability in the internship training management system of Beijing Century Super Star Information...

6.7AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2022/10/31 12:00 a.m.•248 views

Simple Cold Storage Management System 1.0 SQL Injection

Simple Cold Storage Management System v1.0 by oretnom23 has SQL injection BUGAuthor: QiaoRui feng Login account: admin/admin123 Super Admin account vendors: https://www.sourcecodester.com/php/15088/simple-cold-storage-management-system-using-phpoop-source-code.html The program is built using the...

7.2CVSS0.4AI score0.01138EPSS
SaveExploits2
OSV
OSV
•added 2022/10/17 2:15 p.m.•19 views

CVE-2022-41471

74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Administrator account...

6.5CVSS5.8AI score0.00598EPSS
SaveExploits1References1
NVD
NVD
•added 2022/10/17 2:15 p.m.•33 views

CVE-2022-41471

74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Administrator account...

6.5CVSS0.00598EPSS
SaveExploits1References1
Prion
Prion
•added 2022/10/17 2:15 p.m.•29 views

Design/Logic Flaw

74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Administrator account...

4CVSS6.4AI score0.00598EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/10/17 12:00 a.m.•13 views

74cms 安全漏洞

XUNYI TECHNOLOGY 74cms is a PHP and MySQL based online recruitment system from China Xunyi Technology Company. A security vulnerability exists in 74cms SE v3.12.0. An attacker can exploit this vulnerability to arbitrarily change the privileges and credentials of the super administrator account...

6.5CVSS6.6AI score0.00598EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/10/17 12:00 a.m.•13 views

PT-2022-25878 · 74Cmsse · 74Cmsse

Name of the Vulnerable Software and Affected Versions: 74cmsSE version 3.12.0 Description: The issue allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Administrator account. Recommendations: For 74cmsSE version 3.12.0, at the...

6.5CVSS6.3AI score0.00598EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/10/17 12:00 a.m.•42 views

CVE-2022-41471

74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Administrator account...

6.6AI score0.00598EPSS
SaveExploits1References1
CVE
CVE
•added 2022/10/17 12:00 a.m.•76 views

CVE-2022-41471

CVE-2022-41471 affects 74cmsSE v3.12.0. An authenticated attacker with low privileges can arbitrarily change the rights and credentials of the Super Administrator account. CVSS v3.1: 6.5 (Network, Low complexity, Privileges Required: Low, No user interaction, Confidentiality: None, Integrity: Hig...

6.5CVSS6.4AI score0.00598EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/17 12:00 a.m.•1 views

CVE-2022-41471: Undefined Security Weakness

74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Administrator account...

6.5CVSS6.7AI score0.00598EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2022/10/17 12:00 a.m.•11 views

CVE-2022-41471

74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Administrator account...

6.8AI score0.00598EPSS
SaveExploits1References1
OSV
OSV
•added 2022/10/14 4:15 a.m.•15 views

CVE-2022-36803

The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the MasterUserEdit API to modify any users role to Super Admin. This vulnerability was reported by Jacob Shafer from Bishop Fox...

8.8CVSS5.8AI score0.00603EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/14 4:15 a.m.•33 views

CVE-2022-36802

The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internal network resources via a Server-Side Request Forgery. This can be exploited by a remote, unauthenticated attacker with Super Admin privileges by sending a...

4.9CVSS0.00912EPSS
SaveExploits0References1
OSV
OSV
•added 2022/10/14 4:15 a.m.•17 views

CVE-2022-36802

The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internal network resources via a Server-Side Request Forgery. This can be exploited by a remote, unauthenticated attacker with Super Admin privileges by sending a...

4.9CVSS5.8AI score0.00912EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/14 4:15 a.m.•47 views

CVE-2022-36803

The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the MasterUserEdit API to modify any users role to Super Admin. This vulnerability was reported by Jacob Shafer from Bishop Fox...

8.8CVSS0.00603EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/14 4:15 a.m.•24 views

Server side request forgery (ssrf)

The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internal network resources via a Server-Side Request Forgery. This can be exploited by a remote, unauthenticated attacker with Super Admin privileges by sending a...

3.3CVSS5.2AI score0.00912EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/10/14 3:45 a.m.•53 views

CVE-2022-36803

The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the MasterUserEdit API to modify any users role to Super Admin. This vulnerability was reported by Jacob Shafer from Bishop Fox...

8.7AI score0.00603EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/10/14 3:45 a.m.•39 views

CVE-2022-36802

The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internal network resources via a Server-Side Request Forgery. This can be exploited by a remote, unauthenticated attacker with Super Admin privileges by sending a...

5.5AI score0.00912EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/14 12:00 a.m.•1 views

CVE-2022-36803: Incorrect Default Permissions

The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the MasterUserEdit API to modify any users role to Super Admin. This vulnerability was reported by Jacob Shafer from Bishop Fox...

8.8CVSS7.8AI score0.00603EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/10/14 12:00 a.m.•14 views

Atlassian Jira 安全漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is mainly used to track and manage various types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira versions prior to 10.109.2, which stems from a vulnerability in the...

8.8CVSS7.9AI score0.00603EPSS
SaveExploits0References2
Rows per page
Query Builder