CVE-2018-13005

creationtimestamp| type| source ---|---|--- 2026-06-25 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp4nqlgyjd2t...

CVE-2024-13005

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

Linux Distros Unpatched Vulnerability : CVE-2017-13005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xidmapenter. CVE-2017-13005 Note that Nessus relies on the presence of the package ...

CVE-2024-13005

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

CVE-2024-13005

creationtimestamp| type| source ---|---|--- 2024-12-29 07:35:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113734957541914206 2024-12-29 08:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3legladbxah2k 2024-12-29 09:50:59+00:00| seen|...

CVE-2024-13005

CVE-2024-13005 affects 1000 Projects Attendance Tracking Management System 1.0; the vulnerability is an SQL injection in /admin/attendance_action.php via the attendance_id parameter. Exploitation is remote and exploits have been disclosed. Multiple sources corroborate the issue and indicate high ...

CVE-2024-13005 1000 Projects Attendance Tracking Management System attendance_action.php sql injection

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

CVE-2024-13005 1000 Projects Attendance Tracking Management System attendance_action.php sql injection

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

Oracle Linux 8 : Unbreakable Enterprise kernel-container (ELSA-2023-13005)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-13005 advisory. - Bluetooth: btsdio: fix use after free bug in btsdioremove due to race condition Zheng Wang CVE-2023-1989 Tenable has extracted the preceding description bloc...

Mageia: Security Advisory (MGASA-2019-0146)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-13005

CVE-2020-13005 entry is rejected/not used per description; does not represent an active vulnerability.

SUSE SLES11 Security Update : tcpdump (SUSE-SU-2019:14191-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14191-1 advisory. - The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen. CVE-2017-12893 - Several protocol parsers in tcpdum...

CVE-2019-13005

An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2. The GitLab graphql service was vulnerable to multiple authorization issues that disclosed restricted user, group, and repository metadata to unauthorized users. It has Incorrect Access Control...

CVE-2019-13005

The CVE-2019-13005 issue affects GitLab Enterprise Edition and Community Edition 1.10–12.0.2. The GitLab GraphQL service contained Authorization issues (Incorrect Access Control) that disclosed restricted user, group, and repository metadata to unauthorized users. Impact is metadata exposure with...

Debian DLA-1432-1 : gpac security update

Two heap buffer over read conditions were found in gpac. CVE-2018-13005 Due to an error in a while loop condition, the function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read. CVE-2018-13006 Due to an error in a strlen call, there is a heap-based buffer over-read in the...

[SECURITY] [DLA 1432-1] gpac security update

Package : gpac Version : 0.5.0+svn5324dfsg1-1+deb8u1 CVE ID : CVE-2018-13005 CVE-2018-13006 Debian Bug : 902782 Two heap buffer over read conditions were found in gpac. CVE-2018-13005 Due to an error in a while loop condition, the function urnRead in isomedia/boxcodebase.c has a heap-based buffer...

Debian: Security Advisory (DLA-1432-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2018-13005

An issue was discovered in MP4Box in GPAC 0.7.1. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...

CVE-2018-13005

GPAC MP4Box is affected by CVE-2018-13005 due to a heap-based buffer over-read in urn_Read (isomedia/box_code_base.c). Exploitation could crash MP4Box and, in some advisories, may allow arbitrary code execution. The Debian DLA-1432-1 advisory confirms two heap over-read conditions (CVE-2018-13005...

CVE-2018-13005

An issue was discovered in MP4Box in GPAC 0.7.1. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...