Lucene search
+L

7636 matches found

CVE
CVE
•added 2023/10/27 1:31 a.m.•92 views

CVE-2023-5813

The CVE-2023-5813 entry concerns SourceCodester Task Reminder System 1.0. Affected component: /classes/Master.php?f=delete_reminder. The issue is an SQL injection caused by manipulating the id parameter, reported as exploitable remotely. Multiple connected sources corroborate the basic vulnerabil...

8.8CVSS6.7AI score0.00444EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/27 12:00 a.m.•7 views

CVE-2023-5814: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=savereminder. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS6.6AI score0.00444EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/27 12:00 a.m.•18 views

Task Reminder System Security Vulnerability

Task Reminder System is a task reminder system by Carlo Montero Personal Developer. A security vulnerability exists in Task Reminder System, which stems from an SQL injection issue in the id parameter of the /classes/Master.php?f=deletereminder location...

8.8CVSS7.9AI score0.00444EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/27 12:00 a.m.•4 views

CVE-2023-5813: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Task Reminder System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deletereminder. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

8.8CVSS6.7AI score0.00444EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/10/27 12:00 a.m.•14 views

PT-2023-32348 · Unknown · Sourcecodester Task Reminder System

Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /classes/Master.php?f=save reminder. The manipulation of the id argument leads to SQL injection. This issue ca...

8.8CVSS7AI score0.00444EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/27 12:00 a.m.•14 views

Task Reminder System SQL Injection Vulnerability

Task Reminder System is a task reminder system by Carlo Montero Personal Developer. A security vulnerability exists in Task Reminder System version 1.0, which stems from a parameter id in the file /classes/Master.php?f=savereminder that can lead to SQL injection...

8.8CVSS7.4AI score0.00444EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/10/27 12:00 a.m.•20 views

PT-2023-32347 · Unknown · Sourcecodester Task Reminder System

Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A critical issue was found, affecting some unknown functionality of the file /classes/Master.php?f=delete reminder. The manipulation of the id argument leads to SQL injection. This...

8.8CVSS7.1AI score0.00444EPSS
SaveExploits0References3
OSV
OSV
•added 2023/10/19 6:17 a.m.•53 views

BIT-2023-42663

Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs.Users of Apache Airflow are advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with...

6.5CVSS6.5AI score0.01551EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2023/10/18 12:15 p.m.•25 views

CVE-2023-32087

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation...

6.1CVSS5AI score0.00298EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/18 12:15 p.m.•14 views

CVE-2023-32087

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation...

6.1CVSS5.8AI score0.00298EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/18 12:15 p.m.•24 views

Cross site scripting

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation...

5.8CVSS6AI score0.00298EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/18 11:39 a.m.•26 views

CVE-2023-32087

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation...

4.6CVSS6.1AI score0.00298EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/18 11:39 a.m.•53 views

CVE-2023-32087

CVE-2023-32087 affects Pegasystem PEGA Platform versions 8.1 to Infinity 23.1.0, with a cross-site scripting (XSS) vulnerability during task creation. The issue is documented across multiple sources (NVD, Red Hat, PRION, CVE lists, CNNVD) and is described as an XSS in the task creation flow. The ...

6.1CVSS5.9AI score0.00298EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/18 11:39 a.m.•27 views

CVE-2023-32087

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation...

4.6CVSS6.1AI score0.00298EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/10/18 12:00 a.m.•15 views

Pegasystem PEGA Platform Cross-Site Scripting Vulnerability

Pegasystem PEGA Platform is a suite of application development platforms from the US-based Pegasystem. The platform is used to develop applications such as BPM Business Process Management, Case Management, Real-time Decision Making and CRM Customer Relationship Management. A security vulnerabilit...

6.1CVSS5.8AI score0.00298EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/18 12:00 a.m.•4 views

CVE-2023-32087: Improper Neutralization of Input During Web Page Generation

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation...

6.1CVSS6.3AI score0.00298EPSS
SaveExploits0References3
Veracode
Veracode
•added 2023/10/16 7:13 a.m.•30 views

Information Disclosure

Apache Airflow is vulnerable to Information Disclosure. The vulnerability is due to an improper access control mechanism which allows an authorized user with read access to specific Directed Acyclic Graphs DAGS to access information about task instances in other DAGs...

6.5CVSS6.4AI score0.01551EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2023/10/14 12:30 p.m.•13 views

GHSA-32WR-QQW6-5MFP Apache Airflow vulnerable to sensitive information exposure

Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user with access to read specific DAGs only to read information about task instances in other DAGs. Users of Apache Airflow are advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with th...

6.5CVSS6AI score0.01551EPSS
SaveExploits0References6
NVD
NVD
•added 2023/10/14 10:15 a.m.•32 views

CVE-2023-42663

Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. Users of Apache Airflow are advised to upgrade to version 2.7.2 or newer to mitigate the risk associated wit...

6.5CVSS6.2AI score0.01551EPSS
SaveExploits0References3
OSV
OSV
•added 2023/10/14 10:15 a.m.•11 views

PYSEC-2023-197

Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. Users of Apache Airflow are advised to upgrade to version 2.7.2 or newer to mitigate the risk associated wit...

6.5CVSS6.6AI score0.01551EPSS
SaveExploits0References3
Rows per page
Query Builder