Lucene search
K

17 matches found

Vulnrichment
Vulnrichment
added 2025/09/17 4:2 p.m.1 views

CVE-2025-10598 SourceCodester Pet Grooming Management Software search_product.php sql injection

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/searchproduct.php. Such manipulation of the argument groupid leads to sql injection. The attack may be launched remotely. The exploit is publicly...

7.5CVSS6.9AI score0.0006EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 10:25 a.m.7 views

CVE-2019-10598

Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop further will not cause an overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

7.8CVSS7.5AI score0.00033EPSS
Exploits0References1
Circl
Circl
added 2024/10/31 11:37 p.m.0 views

CVE-2024-10598

creationtimestamp| type| source ---|---|--- 2024-10-31 23:37:59+00:00| seen| https://t.me/cvedetector/9546...

6.9CVSS5.4AI score0.00121EPSS
Exploits1References1
NVD
NVD
added 2024/10/31 10:15 p.m.13 views

CVE-2024-10598

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

6.9CVSS0.00121EPSS
Exploits1References4
OSV
OSV
added 2024/10/31 10:15 p.m.0 views

CVE-2024-10598

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

6.5CVSS5.4AI score0.00121EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/10/31 9:31 p.m.12 views

CVE-2024-10598 Tongda OA Annual Leave data.php improper authorization

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

6.9CVSS0.00121EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/10/31 9:31 p.m.10 views

CVE-2024-10598 Tongda OA Annual Leave data.php improper authorization

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

6.9CVSS7.1AI score0.00121EPSS
Exploits1References4
OSV
OSV
added 2020/04/01 9:15 p.m.0 views

CVE-2020-10598

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...

6.1CVSS5.8AI score0.00093EPSS
Exploits0References1
NVD
NVD
added 2020/04/01 9:15 p.m.10 views

CVE-2020-10598

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...

6.1CVSS6.1AI score0.00093EPSS
Exploits0References1
CVE
CVE
added 2020/04/01 8:59 p.m.56 views

CVE-2020-10598

CVE-2020-10598 affects BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1. The issue is a restricted desktop environment escape in kiosk mode. Somelike crafted inputs could allow a user with access to escape the restricted environment and access sensitive data. The a...

6.1CVSS6.1AI score0.00093EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/01 8:59 p.m.16 views

CVE-2020-10598

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...

6.2AI score0.00093EPSS
Exploits0References1
CVE
CVE
added 2019/12/18 5:25 a.m.110 views

CVE-2019-10598

CVE-2019-10598 is a Qualcomm/ Snapdragon WLAN host vulnerability where an out-of-bounds access can occur while processing peer info in IBSS mode due to a missing upper-bound check in a loop. Affected products include Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consum...

7.8CVSS7.8AI score0.00033EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2019/12/11 3:0 a.m.1 views

CVE-2019-10598

creationtimestamp| type| source ---|---|--- 2019-12-11 03:00:17+00:00| seen| https://t.me/indoghostsec/731 2019-12-11 16:24:35+00:00| seen| https://t.me/indoghostsec/751 2019-12-13 11:21:12+00:00| seen| Telegram/iQUZE2pIByE4vkwExY2sw7tjReCcmi36nOFNFwktNW4 2019-12-14 01:31:35+00:00| seen|...

7.8CVSS7.8AI score0.00033EPSS
Exploits0References2
CVE
CVE
added 2018/08/13 10:0 p.m.49 views

CVE-2018-10598

CVE-2018-10598 affects Delta Electronics CNCSoft ScreenEditor: two out-of-bounds read vulnerabilities in CNCSoft 1.00.83 and earlier with ScreenEditor 1.00.54, caused by lack of input validation when processing project files. Impact stated in sources: potential remote code execution with administ...

8.1CVSS8.6AI score0.01011EPSS
Exploits0References2Affected Software2
OSV
OSV
added 2018/06/01 6:29 p.m.1 views

CVE-2016-10598

arrayfire-js is a module for ArrayFire for the Node.js platform. arrayfire-js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the...

7.5CVSS6.3AI score0.00689EPSS
Exploits0References1
CVE
CVE
added 2018/06/01 6:0 p.m.61 views

CVE-2016-10598

CVE-2016-10598 affects the Node.js module arrayfire-js . The vulnerability arises because it downloads binary resources over HTTP, enabling MitM interception. If an attacker on the network can swap the requested binary with a malicious one, remote code execution (RCE) may be possible on the host ...

8.5CVSS7.8AI score0.00689EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/01/04 6:0 a.m.14 views

CVE-2017-18020

On Samsung mobile devices with L5.x, M6.x, and N7.x software and Exynos chipsets, attackers can execute arbitrary code in the bootloader because S Boot omits a size check during a copy of ramfs data to memory. The Samsung ID is SVE-2017-10598...

8.6AI score0.00052EPSS
Exploits0References1
Rows per page
Query Builder