Lucene search
+L

66 matches found

Positive Technologies
Positive Technologies
added 2022/07/18 12:0 a.m.7 views

PT-2022-16691 · WordPress · Freemind Wp Browser

Name of the Vulnerable Software and Affected Versions: FreeMind WP Browser plugin for WordPress versions up to, and including 1.2 Description: The issue is due to missing nonce protection on the FreemindOptions function found in the /freemind-wp-browser.php file. This allows unauthenticated...

8.8CVSS8.4AI score0.00629EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/07/18 12:0 a.m.9 views

PT-2022-14256 · WordPress · Dx Share Selection

Name of the Vulnerable Software and Affected Versions: DX Share Selection plugin for WordPress versions up to, and including 1.4 Description: The issue is due to missing nonce protection on the dxss admin page function found in the /dx-share-selection.php file, making it possible for...

8.8CVSS8.6AI score0.00644EPSS
SaveExploits0References9
NVD
NVD
added 2018/07/24 3:29 p.m.22 views

CVE-2018-5384

Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection. If successfully exploited the user can get info from the underlying postgresql database that could lead into to total compromise of the product. The said script is available...

9.8CVSS9.7AI score0.04363EPSS
SaveExploits1References4
OSV
OSV
added 2018/07/24 3:29 p.m.6 views

CVE-2018-5384

Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection. If successfully exploited the user can get info from the underlying postgresql database that could lead into to total compromise of the product. The said script is available...

9.8CVSS5.8AI score0.04363EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2018/07/24 3:0 p.m.33 views

CVE-2018-5384 Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection

Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection. If successfully exploited the user can get info from the underlying postgresql database that could lead into to total compromise of the product. The said script is available...

9.7AI score0.04363EPSS
SaveExploits1References4
zdt
zdt
added 2009/06/01 12:0 a.m.21 views

ASMAX AR 804 gu Web Management Console Arbitrary Command Exec

Exploit for hardware platform in category remote exploits ============================================================= ASMAX AR 804 gu Web Management Console Arbitrary Command Exec ============================================================= 1. ASMAX 804 gu router is a SOHO class device. It...

7.1AI score
SaveExploits0
Rows per page
Query Builder