Lucene search
+L

3633 matches found

Debian CVE
Debian CVE
•added 2024/02/27 9:36 a.m.•46 views

CVE-2021-46921

In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix ordering in queuedwritelockslowpath While this code is executed with the waitlock held, a reader can acquire the lock without holding waitlock. The writer side loops checking the value with the...

7.8CVSS5.3AI score0.00237EPSS
SaveExploits0
OSV
OSV
•added 2024/02/14 3:15 p.m.•12 views

CVE-2024-25217

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

9.8CVSS5.8AI score0.0069EPSS
SaveExploits1References1
NVD
NVD
•added 2024/02/14 3:15 p.m.•17 views

CVE-2024-25217

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

9.8CVSS7.8AI score0.0069EPSS
SaveExploits1References1
Prion
Prion
•added 2024/02/14 3:15 p.m.•20 views

Sql injection

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

8.6AI score0.0069EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/02/14 12:00 a.m.•14 views

Online Medicine Ordering System SQL Injection Vulnerability

Online Medicine Ordering System is an online medicine ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Online Medicine Ordering System v1.0, which is caused by a SQL injection vulnerability in the component /omos/?p=products/viewproduct...

9.8CVSS8AI score0.0069EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/02/14 12:00 a.m.•20 views

CVE-2024-25217

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

8.5AI score0.0069EPSS
SaveExploits1References1
CVE
CVE
•added 2024/02/14 12:00 a.m.•92 views

CVE-2024-25217

CVE-2024-25217 corresponds to a SQL injection vulnerability in Online Medicine Ordering System v1.0, exploitable through the id parameter in /omos/?p=products/view_product. Connected sources repeatedly confirm the issue is SQL injection with potential for high impact on confidentiality, integrity...

9.8CVSS8.1AI score0.0069EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•7 views

CVE-2024-25217: Improper Neutralization of Special Elements used in an SQL Command

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

9.8CVSS5.8AI score0.0069EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/02/14 12:00 a.m.•34 views

CVE-2024-25217

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

8.1AI score0.0069EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/02/14 12:00 a.m.•14 views

PT-2024-20827 · Unknown · Online Medicine Ordering System

Name of the Vulnerable Software and Affected Versions: Online Medicine Ordering System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/omos/?p=products/view product" API endpoint. Recommendations: Fo...

9.8CVSS7.4AI score0.0069EPSS
SaveExploits1References5
Wallarm Lab
Wallarm Lab
•added 2024/01/30 1:58 p.m.•91 views

Kafka vs RabbitMQ

An Intro to Kafka and RabbitMQ: The Masters of Messaging In the realm of messaging systems, two names stand out: Kafka and RabbitMQ. These two powerhouses have become the go-to solutions for developers and organizations looking to handle high-volume, real-time data processing and messaging. But...

7.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2024/01/22 2:22 p.m.•35 views

python-twisted: disordered HTTP pipeline response in twisted.web

Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, th...

5.3CVSS5.8AI score0.00766EPSS
SaveExploits1References4
OSV
OSV
•added 2024/01/12 11:06 a.m.•11 views

OESA-2024-1047 python-twisted security update

Twisted is an event-based framework for internet applications, supporting Python 2.7 and Python 3.5+. It includes modules for many different purposes, including the following: Security Fixes: Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending...

5.3CVSS6.9AI score0.00766EPSS
SaveExploits1References2
NVD
NVD
•added 2024/01/11 8:15 p.m.•41 views

CVE-2024-0423

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file dishes.php. The manipulation of the argument resid leads to cross site scripting. The attack may be launched remotely. The...

5.4CVSS4.2AI score0.00533EPSS
SaveExploits1References3
OSV
OSV
•added 2024/01/11 8:15 p.m.•17 views

CVE-2024-0423

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file dishes.php. The manipulation of the argument resid leads to cross site scripting. The attack may be launched remotely. The...

5.4CVSS3.6AI score0.00533EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/11 8:15 p.m.•34 views

Cross site scripting

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file dishes.php. The manipulation of the argument resid leads to cross site scripting. The attack may be launched remotely. The...

4CVSS6.4AI score0.00533EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/11 7:31 p.m.•14 views

CVE-2024-0423 CodeAstro Online Food Ordering System dishes.php cross site scripting

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file dishes.php. The manipulation of the argument resid leads to cross site scripting. The attack may be launched remotely. The...

4CVSS6.2AI score0.00533EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/01/11 7:31 p.m.•54 views

CVE-2024-0423 CodeAstro Online Food Ordering System dishes.php cross site scripting

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file dishes.php. The manipulation of the argument resid leads to cross site scripting. The attack may be launched remotely. The...

4CVSS5.4AI score0.00533EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/11 7:31 p.m.•85 views

CVE-2024-0423

CVE-2024-0423 affects CodeAstro Online Food Ordering System v1.0. The vulnerability is in the dishes.php functionality, where manipulation of the res_id parameter causes cross-site scripting. It may be exploited remotely and the public exploit has been disclosed. Remediation details are not provi...

5.4CVSS5.2AI score0.00533EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/01/11 12:00 a.m.•17 views

PT-2024-8423

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.2 Description The vulnerability is related to incorrect lock ordering in the btrfs zone activate function, which can lead to a deadlock. This issue was detected by the btrfs CI when running generic/129,...

5.5CVSS6AI score0.00176EPSS
SaveExploits0
Rows per page
Query Builder