Lucene search
+L

14332 matches found

Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•13 views

WordPress WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin <= 1.0.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Google Street View with 360° virtual tour & Google maps + Local SEO plugin versions = 1.0.8. Solution Update the WordPress WP Google Street View with 360° virtual tour & Google maps + Local SEO plugin to the latest availabl...

1.7AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•16 views

WordPress WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin <= 1.0.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Google Street View with 360° virtual tour & Google maps + Local SEO plugin versions = 1.0.8. Solution Update the WordPress WP Google Street View with 360° virtual tour & Google maps + Local SEO plug...

2.7AI score
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/28 12:00 a.m.•5 views

CVE-2022-24572: Improper Neutralization of Input During Web Page Generation

Car Driving School Management System v1.0 is affected by Cross Site Scripting XSS in the User Enrollment Form Username Field. To exploit this Vulnerability, an admin views the registered user details...

6.1CVSS6.3AI score0.00641EPSS
SaveExploits1References2
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•17 views

WordPress Mobile View for Responsive web design optimization (UX design) + Mobile Friendly Test plugin <= 1.2.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Mobile View for Responsive web design optimization UX design + Mobile Friendly Test plugin versions = 1.2.3. Solution Update the WordPress Mobile View for Responsive web design optimization UX design +...

3.7AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•19 views

WordPress Mobile View for Responsive web design optimization (UX design) + Mobile Friendly Test plugin <= 1.2.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Mobile View for Responsive web design optimization UX design + Mobile Friendly Test plugin versions = 1.2.3. Solution Update the WordPress Mobile View for Responsive web design optimization UX design + Mobile Friendly Test...

2.3AI score
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/02/28 12:00 a.m.•14 views

WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS5.9AI score0.02231EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/02/26 12:15 a.m.•17 views

CVE-2022-25096

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/viewmember.php...

9.8CVSS7.3AI score0.02101EPSS
SaveExploits2References4
OSV
OSV
•added 2022/02/26 12:15 a.m.•18 views

CVE-2022-25096

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/viewmember.php...

9.8CVSS7.3AI score0.02101EPSS
SaveExploits2References3
Prion
Prion
•added 2022/02/26 12:15 a.m.•21 views

Sql injection

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/viewmember.php...

7.5CVSS9.7AI score0.02101EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2022/02/25 11:22 p.m.•41 views

CVE-2022-25096

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/viewmember.php...

10AI score0.02101EPSS
SaveExploits2References3
attackerkb
attackerkb
•added 2022/02/24 7:15 p.m.•15 views

CVE-2022-25003

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/viewdoctor.php...

9.8CVSS5.8AI score0.01638EPSS
SaveExploits2References4
OSV
OSV
•added 2022/02/24 7:15 p.m.•14 views

CVE-2022-25003

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/viewdoctor.php...

9.8CVSS5.8AI score0.01638EPSS
SaveExploits2References3
NVD
NVD
•added 2022/02/24 7:15 p.m.•17 views

CVE-2022-25003

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/viewdoctor.php...

9.8CVSS0.01638EPSS
SaveExploits2References3
NVD
NVD
•added 2022/02/24 7:15 p.m.•30 views

CVE-2020-14481

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain...

7.8CVSS0.00163EPSS
SaveExploits0References1
OSV
OSV
•added 2022/02/24 7:15 p.m.•17 views

CVE-2020-14481

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain...

7.8CVSS5.8AI score0.00163EPSS
SaveExploits0References1
Prion
Prion
•added 2022/02/24 7:15 p.m.•21 views

Sql injection

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/viewdoctor.php...

7.5CVSS9.7AI score0.01638EPSS
SaveExploits2References3Affected Software1
Prion
Prion
•added 2022/02/24 7:15 p.m.•24 views

Default credentials

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain...

2.1CVSS7.5AI score0.00163EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/02/24 6:27 p.m.•47 views

CVE-2020-14481

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain...

7.6AI score0.00163EPSS
SaveExploits0References1
CVE
CVE
•added 2022/02/24 6:27 p.m.•94 views

CVE-2020-14481

The CVE-2020-14481 entry concerns the DeskLock tool in Rockwell Automation’s FactoryTalk View SE, where the DeskLock password encoding is weak. According to connected sources, a local, authenticated attacker could decipher credentials stored/processed by DeskLock, potentially gaining full access ...

7.8CVSS7.5AI score0.00163EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•3 views

CVE-2020-14481: Weak Encoding for Password

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain...

7.8CVSS7.2AI score0.00163EPSS
SaveExploits0References3
Rows per page
Query Builder