Lucene search
+L

30850 matches found

Nuclei
Nuclei
added 7 hours ago92 views

Online Security Guards Hiring System - Cross-Site Scripting

A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file search-request.php. id: CVE-2023-0527 info: name: Online Security Guards Hiring System - Cross-Site Scripting author:...

6.1CVSS4.3AI score0.06118EPSS
Exploits4References5
Nuclei
Nuclei
added 7 hours ago53 views

XWiki < 4.10.15 - Email Disclosure

The Solr-based search in XWiki discloses the email addresses of users even when obfuscation of email addresses is enabled. To demonstrate the vulnerability, search for objcontent:email using XWiki's regular search interface. id: CVE-2023-50720 info: name: XWiki 4.10.15 - Email Disclosure author:...

5.3CVSS5.7AI score0.59119EPSS
Exploits0References2
Nuclei
Nuclei
added 7 hours ago126 views

SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure

The plugin does not ensure that users making. alive search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink id: CVE-2022-2535 info: name: SearchWP Live Ajax Search 1.6.2 -...

5.3CVSS5.6AI score0.01548EPSS
Exploits2References3
Nuclei
Nuclei
added 7 hours ago79 views

Complete Online Job Search System 1.0 - SQL Injection

Complete Online Job Search System 1.0 contains a SQL injection vulnerability via /eris/index.php?q=hiring&search=. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

7.2CVSS7.5AI score0.04522EPSS
Exploits1References3
Nuclei
Nuclei
added 7 hours ago104 views

MooSocial 3.1.8 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. id: CVE-2023-45542 info: name: MooSocial 3.1.8 - Cross-Site Scripting author...

6.1CVSS5.8AI score0.01635EPSS
Exploits2References3
Nuclei
Nuclei
added 7 hours ago40 views

Autonomy Ultraseek - Open Redirect

Open redirect vulnerability in cs.html in the Autonomy formerly Verity Ultraseek search engine allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter. id: CVE-2009-0347 info: name: Autonomy Ultraseek - Open Redirect author: ctflearner...

5.8CVSS5.5AI score0.10932EPSS
Exploits0References5
Nuclei
Nuclei
added 7 hours ago40 views

XWiki - HQL Injection

XWiki is vulnerable to Hibernate Query Language HQL injection in the wiki and space search REST API starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0. The vulnerability allows attackers to inject malicious HQL queries through the orderField parameter, potential...

9.3CVSS9.2AI score0.02207EPSS
Exploits0References2
Nuclei
Nuclei
added 7 hours ago19 views

Complete Online Job Search System 1.0 - Cross-Site Scripting

Complete Online Job Search System 1.0 contains a cross-site scripting vulnerability via index.php?q=advancesearch. id: CVE-2022-29316 info: name: Complete Online Job Search System 1.0 - Cross-Site Scripting author: arafatansari severity: high description: | Complete Online Job Search System 1.0...

9.8CVSS8AI score0.03139EPSS
Exploits0References2
Nuclei
Nuclei
added 7 hours ago49 views

Complete Online Job Search System 1.0 - SQL Injection

Complete Online Job Search System 1.0 contains a SQL injection vulnerability via /eris/admin/company/index.php?view=edit&id=. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site...

7.2CVSS7.5AI score0.04522EPSS
Exploits1References3
Nuclei
Nuclei
added 7 hours ago26 views

ChanCMS <= 3.3.0 - SQL Injection

yanyutao0402 ChanCMS = 3.3.0 contains a SQL injection caused by manipulation of the "key" argument in app/modules/api/service/Api.js Search function, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request. id: CVE-2025-10210 info: name: ChanCMS = 3.3.0 - SQL...

8.8CVSS6.9AI score0.01195EPSS
Exploits0References4
Nuclei
Nuclei
added 7 hours ago55 views

Hospital Management System 1.0 - Cross-Site Scripting

Hospital Management System 1.0 contains a cross-site scripting vulnerability via the searchdata parameter in doctor/search.php and patient-search.php. id: CVE-2021-39411 info: name: Hospital Management System 1.0 - Cross-Site Scripting author: arafatansari severity: high description: | Hospital...

6.1CVSS5.8AI score0.0089EPSS
Exploits0References2
EUVD
EUVD
added 11 hours ago4 views

EUVD-2026-47583

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch que...

6.5CVSS5.4AI score
Exploits0References2
EUVD
EUVD
added 11 hours ago4 views

EUVD-2026-47417

Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite component: Search Integration Engine. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

8.1CVSS7.1AI score
Exploits0References2
EUVD
EUVD
added 11 hours ago3 views

EUVD-2026-47372

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

7.4CVSS7.1AI score
Exploits0References2
EUVD
EUVD
added 11 hours ago2 views

EUVD-2026-47373

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided...

7.1CVSS7AI score
Exploits0References2
EUVD
EUVD
added 11 hours ago5 views

EUVD-2026-47371

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

8.1CVSS7.3AI score
Exploits0References2
EUVD
EUVD
added 11 hours ago4 views

EUVD-2026-47358

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

8.1CVSS7.1AI score
Exploits0References2
EUVD
EUVD
added 11 hours ago3 views

EUVD-2026-47355

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the...

6.2CVSS7.1AI score
Exploits0References2
EUVD
EUVD
added 11 hours ago3 views

EUVD-2026-47363

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided...

9.1CVSS7.1AI score
Exploits0References2
EUVD
EUVD
added 11 hours ago4 views

EUVD-2026-47364

Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Commerce Guided...

9.1CVSS7.1AI score
Exploits0References2
Rows per page
Query Builder