Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
super vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2018-13516
The mintToken function of a smart contract implementation for Super Cool Awesome Money (SCAM), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
Supercoolawesomemoney Super Cool Awesome Money -
6.1
CVSSv3
CVE-2018-18082
XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI.
Bijiadao Waimai Super Cms 20150505
NA
CVE-2014-5775
The Super Fast Browser (aka iron.web.jalepano.browser) application 2.0.5.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle malicious users to spoof servers and obtain sensitive information via a crafted certificate.
Sfbrowser Super Fast Browser 2.0.5.6
5.3
CVSSv3
CVE-2018-16157
waimai Super Cms 20150505 has a logic flaw allowing malicious users to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=cart&a=save item_totals parameter to zero, the entire cart is sold for free.
Bijiadao Waimai Super Cms 20150505
6.5
CVSSv3
CVE-2018-16315
In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add.
Bijiadao Waimai Super Cms 20150505
4.8
CVSSv3
CVE-2018-15570
In waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname parameter.
Bijiadao Waimai Super Cms 20150505
NA
CVE-2003-0417
Directory traversal vulnerability in Son hServer 0.2 allows remote malicious users to read arbitrary files via ".|." (modified dot-dot) sequences.
Super-m Son Hserver 0.2
6.1
CVSSv3
CVE-2019-7567
An issue exists in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter.
Bijiadao Waimai Super Cms 20150505
9.8
CVSSv3
CVE-2019-7585
An issue exists in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI.
Bijiadao Waimai Super Cms 20150505
9.8
CVSSv3
CVE-2023-41507
Super Store Finder v3.6 exists to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters.
Superstorefinder Super Store Finder 3.6
1 Github repository
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »