Lucene search
+L

12457 matches found

Positive Technologies
Positive Technologies
added 2024/05/06 12:00 a.m.12 views

PT-2024-31497 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A problematic issue was found in the system, affecting an unknown part of the file /view/student payment invoice.php. The manipulation of the desc argument leads t...

6.1CVSS4.2AI score0.00582EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2024/05/05 12:00 a.m.13 views

PT-2024-31439 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A problematic issue has been found in the system, affecting the processing of the file /view/timetable update form.php. The manipulation of the grade argument lead...

6.1CVSS4.3AI score0.00566EPSS
SaveExploits1References9
OSV
OSV
added 2024/05/03 7:15 p.m.10 views

CVE-2021-20451

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 196643...

7.2CVSS5.9AI score0.00504EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 5:36 p.m.82 views

CVE-2023-38724

Summary: CVE-2023-38724 affects IBM Cognos Controller versions 10.4.1, 10.4.2, and 11.0.0. The issue is a SQL injection vulnerability that could allow a remote attacker to view, add, modify, or delete data in the back-end database when exploiting crafted SQL statements. The connected/official rem...

9.8CVSS7.2AI score0.00465EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/05/03 3:15 a.m.24 views

CVE-2023-44430

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS8AI score0.0065EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:15 a.m.14 views

CVE-2023-44430

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS6.2AI score0.0065EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/05/03 3:15 a.m.9 views

CVE-2023-44430

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS6.3AI score0.0065EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:15 a.m.7 views

CVE-2023-44414

D-Link D-View coreserviceactionscript Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw...

9.8CVSS6.3AI score0.02353EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/03 3:15 a.m.10 views

CVE-2023-44414

D-Link D-View coreserviceactionscript Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw...

9.8CVSS6.3AI score0.02353EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/03 3:15 a.m.39 views

CVE-2023-44414

D-Link D-View coreserviceactionscript Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw...

9.8CVSS9.9AI score0.02353EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/03 3:15 a.m.9 views

CVE-2023-44412

D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw...

8.2CVSS5.8AI score0.83681EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/03 3:15 a.m.9 views

CVE-2023-44411

D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exist...

9.8CVSS5.9AI score0.02351EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:15 a.m.9 views

CVE-2023-44412

D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw...

8.2CVSS5.7AI score0.83681EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/03 3:15 a.m.15 views

CVE-2023-44411

D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exist...

9.8CVSS9.8AI score0.02351EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/03 3:15 a.m.26 views

CVE-2023-44412

D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw...

8.2CVSS7.9AI score0.83681EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/03 3:15 a.m.32 views

CVE-2023-44410

D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists within the showUsers...

8.8CVSS8.8AI score0.01452EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:15 a.m.10 views

CVE-2023-44410

D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists within the showUsers...

8.8CVSS5.8AI score0.01452EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/03 3:15 a.m.24 views

CVE-2023-44413

D-Link D-View shutdowncoreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw...

7.5CVSS5.8AI score0.01489EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/03 3:15 a.m.8 views

CVE-2023-44413

D-Link D-View shutdowncoreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw...

7.5CVSS5.9AI score0.01489EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/03 3:15 a.m.10 views

CVE-2023-44410

D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists within the showUsers...

8.8CVSS5.8AI score0.01452EPSS
SaveExploits0References1
Rows per page
Query Builder