NAME__________DREAM TRAIN INTERNET TONE Family security bypassPlatforms Affected:DREAM TRAIN INTERNET TONE FamilyRisk Level:5.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________DREAM TRAIN INTERNET TONE Family could...
NAME__________Apache Superset server-side request forgeryPlatforms Affected:Apache Superset 2.0.1Risk Level:7.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Apache Superset is vulnerable to server-side request forgery, caused by...
NAME__________Kylin Software youker-assistant command executionPlatforms Affected:Risk Level:5.3Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________Kylin Software youker-assistant could allow a local authenticated attacker to...
NAME__________Guzzle PSR-7 weak securityPlatforms Affected:Guzzle PSR-7 2.0.0 Guzzle PSR-7 1.9.0 Guzzle PSR-7 2.4.4Risk Level:5.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Guzzle PSR-7 could provide weaker...
NAME__________Sourcecodester Judging Management System SQL injectionPlatforms Affected:Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Sourcecodester Judging Management System is vulnerable to SQL injection. A remote...
NAME__________ASUSTOR Data Master (ADM) buffer overflowPlatforms Affected:ASUSTOR Data Master 4.0 ASUSTOR Data Master 4.1 ASUSTOR Data Master 4.2Risk Level:7.1Exploitability:UnprovenConsequences:Gain Access...
NAME__________NETGEAR RAX30 buffer overflowPlatforms Affected:NETGEAR RAX30Risk Level:6.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________NETGEAR RAX30 is vulnerable to a stack-based buffer overflow, caused by improper...
NAME__________Apache IoTDB security bypassPlatforms Affected:Apache IoTDB 0.13.0 Apache IoTDB 0.13.1 Apache IoTDB 0.13.2 Apache IoTDB 0.13.3Risk Level:10Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Apache IoTDB...
NAME__________Chatwoot cross-site scriptingPlatforms Affected:Risk Level:5.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Chatwoot is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...
NAME__________Apache Superset information disclosurePlatforms Affected:Apache Superset 2.0.1Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Apache Superset could allow a remote authenticate attacker to obtain sensitive...
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-45789A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution...
NAME__________HPE OneView Global Dashboard (OVGD) information disclosurePlatforms Affected:HPE OneView Global Dashboard 2.71Risk Level:7.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________HPE OneView Global Dashboard (OVGD) could...
NAME__________Arista EOS denial of servicePlatforms Affected:Arista EOS 4.24.11M Arista EOS 4.25.10M Arista EOS 4.26.9M Arista EOS 4.27.8.1M Arista EOS 4.28.5.1M...
NAME__________Fortinet FortiADC, Fortinet FortiDDoS, and Fortinet FortiDDoS-F command executionPlatforms Affected:Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Fortinet FortiADC, Fortinet FortiDDoS, and Fortinet FortiDDoS-F could...
NAME__________HPE OneView Global Dashboard (OVGD) information disclosurePlatforms Affected:HPE OneView Global Dashboard 2.71Risk Level:7.8Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________HPE OneView Global Dashboard (OVGD) could...
NAME__________Auto Dealer Management System SQL injectionPlatforms Affected:Sourcecodester Auto Dealer Management System 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Auto Dealer Management System is vulnerable...
NAME__________Jubei JB Inquiry information disclosurePlatforms Affected:Jubei JB Inquiry 0.6.1 Jubei JB Inquiry 0.6.0 Jubei JB Inquiry 0.5.2 Jubei JB Inquiry...
NAME__________Trend Micro Security code executionPlatforms Affected:Trend Micro Security 2022/2023 17.7.1476 Trend Micro Security 2021 17.0.1412Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Trend Micro Security...
NAME__________Auto Dealer Management System SQL injectionPlatforms Affected:Sourcecodester Auto Dealer Management System 1.0Risk Level:6.1Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Auto Dealer Management System is vulnerable...
NAME__________VMware Tanzu Spring Session information disclosurePlatforms Affected:VMware Tanzu Spring Session 3.0.0Risk Level:6.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________VMware Tanzu Spring Session could allow a...
NAME__________LibreSSL security bypassPlatforms Affected:LibreSSL LibreSSL 3.4.1Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________LibreSSL could allow a remote attacker to bypass security restrictions, caused by...
NAME__________Matrix matrix-js-sdk information disclosurePlatforms Affected:Matrix matrix-js-sdk 24.0.0Risk Level:5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Matrix matrix-js-sdk could allow a remote authenticated attacker to obtain sensitive...
NAME__________Microsoft Defender security bypassPlatforms Affected:Microsoft Malware Protection EngineRisk Level:6.2Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Microsoft Defender could allow a local attacker to bypass security...
NAME__________FreeType tt_hvadvance_adjust function denial of servicePlatforms Affected:FreeType FreeType 2.12.1Risk Level:5.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________FreeType is vulnerable to a denial of service,...
