Lucene search
+L

8786 matches found

BDU FSTEC
BDU FSTEC
•added 2024/05/15 12:00 a.m.•20 views

Linux kernel Flush All CPUs Locked

The vulnerability of the flushallcpuslocked function in the mm/slub.c module of the Linux kernel’s memory management subsystem is related to the use of an incorrect queue for task execution. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

7.8CVSS7.2AI score0.00673EPSS
SaveExploits0References10Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/15 12:00 a.m.•7 views

CVE-2024-3968: Improper Input Validation

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution using custom file upload task...

9.8CVSS6.1AI score0.00678EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/05/14 6:31 p.m.•41 views

Apache Airflow: XSS vulnerability in Task Instance Log/Log Details

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue...

5.4CVSS5.7AI score0.01572EPSS
SaveExploits0References7Affected Software1
osv_ghsa
osv_ghsa
•added 2024/05/14 6:31 p.m.•64 views

GHSA-52GM-QMG3-R4QP Apache Airflow: XSS vulnerability in Task Instance Log/Log Details

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue...

5.4CVSS5.7AI score0.01572EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2024/05/14 5:15 p.m.•14 views

CVE-2024-26238

Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability...

7.8CVSS7.3AI score0.00818EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/14 5:15 p.m.•40 views

CVE-2024-26238

Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability...

7.8CVSS7.9AI score0.00818EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/14 4:57 p.m.•56 views

CVE-2024-26238 Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability

...

7.8CVSS8.4AI score0.00818EPSS
SaveExploits0References1
osv_pysec
osv_pysec
•added 2024/05/14 4:17 p.m.•50 views

PYSEC-2024-264

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue...

5.4CVSS5.7AI score0.01572EPSS
SaveExploits0References4
PyPA
PyPA
•added 2024/05/14 4:17 p.m.•26 views

PYSEC-2024-264

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.Users are recommended to upgrade to version 2.9.1, which fixes this issue...

5.4CVSS5.8AI score0.01572EPSS
SaveExploits0References4Affected Software1
osv_cve
osv_cve
•added 2024/05/14 3:14 p.m.•21 views

CVE-2024-28277

In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subjectname= parameter, enabling Stored Cross-Site Scripting XSS attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloa...

6.1CVSS5.9AI score0.00362EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/14 3:14 p.m.•31 views

CVE-2024-28276

Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting XSS via add-task.php?taskname=...

6.1CVSS5.8AI score0.00286EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/05/14 3:14 p.m.•21 views

CVE-2024-28276

Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting XSS via add-task.php?taskname=...

6.1CVSS5.8AI score0.00286EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/05/14 3:09 p.m.•19 views

CVE-2024-26517

SQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the delete-task.php component...

9.1CVSS5.9AI score0.00802EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/14 3:09 p.m.•34 views

CVE-2024-26517

SQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the delete-task.php component...

9.1CVSS7.1AI score0.00802EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/05/14 10:43 a.m.•23 views

CVE-2024-32077 Apache Airflow: XSS vulnerability in Task Instance Log/Log Details

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue...

5.7AI score0.01572EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/05/14 10:43 a.m.•70 views

CVE-2024-32077 Apache Airflow: XSS vulnerability in Task Instance Log/Log Details

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue...

6.5AI score0.01572EPSS
SaveExploits0References3
CVE
CVE
•added 2024/05/14 10:43 a.m.•112 views

CVE-2024-32077

CVE-2024-32077 concerns Apache Airflow 2.9.0 with a cross-site scripting (XSS) vulnerability in Task Instance Log/Log Details. An authenticated attacker can inject malicious data into task instance logs due to insufficient input handling, leading to XSS when logs are viewed. The affected product ...

5.4CVSS5.7AI score0.01572EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2024/05/14 10:43 a.m.•11 views

CVE-2024-32077

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue...

5.4CVSS5.7AI score0.01572EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•8 views

CVE-2024-28277: Improper Neutralization of Input During Web Page Generation

In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subjectname= parameter, enabling Stored Cross-Site Scripting XSS attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloa...

6.1CVSS6AI score0.00362EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•7 views

CVE-2024-26517: Improper Neutralization of Input During Web Page Generation

SQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the delete-task.php component...

9.1CVSS6AI score0.00802EPSS
SaveExploits0References1
Rows per page
Query Builder