Page(s) : 1 ... 488 489 490 491 492 493 494 495 496 497 [498] 499 500 501 502 503 504 505 506 507 508 ... | Result(s) : 43370 |
Alerts
DATE | NAME | CATEGORIES | DETAIL | |
---|---|---|---|---|
9.8 | 2022-10-13 | CVE-2022-41497 | cve | ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg_url parameter at /manager/index.php. |
9.8 | 2022-10-13 | CVE-2022-39303 | cve | Ree6 is a moderation bot. This vulnerability allows manipulation of SQL queries. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow obje... |
9.8 | 2022-10-13 | CVE-2022-41496 | cve | iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php. |
9.8 | 2022-10-13 | CVE-2022-41495 | cve | ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the rss_url_news parameter at /manager/index.php. |
9.8 | 2022-10-13 | CVE-2022-3457 | cve | Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5. |
9.8 | 2022-10-12 | CVE-2022-31228 | cve | Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can potentially exploit this vulnerability and gain access t... |
9.8 | 2022-10-12 | CVE-2022-37614 | cve | Prototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f0566fd6d72af8c943ae5ca2aa92e516aa2cf via the key variable in mockery.js. |
9.8 | 2022-10-12 | CVE-2018-18446 | cve | dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2). |
9.8 | 2022-10-12 | CVE-2022-40871 | cve | Dolibarr ERP & CRM |
9.8 | 2022-10-12 | CVE-2018-18447 | cve | dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2). |
9.8 | 2022-10-12 | CVE-2022-41408 | cve | Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order. |
9.8 | 2022-10-12 | CVE-2022-39298 | cve | MelisFront is the engine that displays website hosted on Melis Platform. It deals with showing pages, plugins, URL rewritting, search optimization and SEO, etc. Attackers can de... |
9.8 | 2022-10-12 | CVE-2022-3458 | cve | A vulnerability has been found in SourceCodester Human Resource Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of t... |
9.8 | 2022-10-12 | CVE-2022-3467 | cve | A vulnerability classified as critical was found in Jiusi OA. Affected by this vulnerability is an unknown functionality of the file /jsoa/hntdCustomDesktopActionContent. The ma... |
9.8 | 2022-10-12 | CVE-2022-40664 | cve | Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher. |
9.8 | 2022-10-12 | CVE-2022-33106 | cve | WiJungle NGFW Version U250 was discovered to be vulnerable to No Rate Limit attack, allowing the attacker to brute force the admin password leading to Account Take Over. |
9.8 | 2022-10-12 | CVE-2022-3465 | cve | A vulnerability classified as critical was found in Mediabridge Medialink. This vulnerability affects unknown code of the file /index.asp. The manipulation leads to improper aut... |
9.8 | 2022-10-12 | CVE-2022-39297 | cve | MelisCms provides a full CMS for Melis Platform, including templating system, drag'n'drop of plugins, SEO and many administration tools. Attackers can deserialize arbi... |
9.8 | 2022-10-12 | CVE-2022-37601 | cve | Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.... |
9.8 | 2022-10-12 | CVE-2022-41403 | cve | OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/so_newletter_custom_popu... |
Page(s) : 1 ... 488 489 490 491 492 493 494 495 496 497 [498] 499 500 501 502 503 504 505 506 507 508 ... | Result(s) : 43370 |