Lucene search
K

100 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:16 a.m.5 views

CVE-2019-2672

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: Print Server. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

8.2CVSS7.2AI score0.00845EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/25 11:25 p.m.4 views

CVE-2025-2672

A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adddeductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The exploit has be...

7.5CVSS7.7AI score0.00075EPSS
Exploits1References1
CVE
CVE
added 2025/03/23 11:0 p.m.44 views

CVE-2025-2672

CVE-2025-2672 affects Code-Projects Payroll Management System 1.0. The vulnerability is a SQL injection in the file /add_deductions.php, triggered by manipulation of the bir parameter. The issue is remote-executable and has been described as critical based on vendor/NVD assessments; multiple sour...

7.5CVSS7.4AI score0.00075EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/23 11:0 p.m.5 views

CVE-2025-2672 code-projects Payroll Management System add_deductions.php sql injection

A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adddeductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The exploit has be...

6.5CVSS7.6AI score0.00075EPSS
Exploits1References5
Circl
Circl
added 2025/02/21 10:10 p.m.0 views

CVE-2024-2672

creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:24+00:00| seen| Telegram/BznzmxeiVgMEET6hhgRfAJlac3sLZZNQ03QPM9lsjBCdRgze...

6.5CVSS4.8AI score0.00048EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/02/05 2:26 p.m.5 views

CVE-2020-2672

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Ema...

8.2CVSS7.2AI score0.01495EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/11/01 12:0 a.m.11 views

Amazon Linux 2 : qt5-qtgraphicaleffects (ALAS-2024-2672)

The version of qt5-qtgraphicaleffects installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2672 advisory. An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6...

8.6CVSS7.9AI score0.00205EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2024/05/10 12:0 a.m.38 views

RHCOS 4 : OpenShift Container Platform 4.14.24 (RHSA-2024:2672)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2672 advisory. - golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2023-45288 - buildah: full container escape ...

8.6CVSS7.1AI score0.75268EPSS
Exploits1References10
Vulnrichment
Vulnrichment
added 2024/03/20 4:31 a.m.13 views

CVE-2024-2672 Campcodes Online Job Finder System controller.php sql injection

A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/user/controller.php. The manipulation of the argument UESRID leads to sql injection. The attack may be launched remotely. The...

6.5CVSS7.3AI score0.00048EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/03/20 4:31 a.m.11 views

CVE-2024-2672 Campcodes Online Job Finder System controller.php sql injection

A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/user/controller.php. The manipulation of the argument UESRID leads to sql injection. The attack may be launched remotely. The...

6.5CVSS7AI score0.00048EPSS
Exploits1References3
CVE
CVE
added 2024/03/20 4:31 a.m.55 views

CVE-2024-2672

CVE-2024-2672 affects Campcodes Online Job Finder System 1.0. The Red Hat and vendor records confirm a SQL injection vulnerability in the /admin/user/controller.php file, triggered by manipulating the UESRID parameter. The issue is exploitable remotely and, per disclosures, the exploit is public....

6.5CVSS6.8AI score0.00048EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/05/12 9:0 a.m.36 views

CVE-2023-2672

CVE-2023-2672 affects SourceCodester Lost and Found Information System 1.0, specifically the file items/view.php’s GET parameter handler. The vulnerability arises from improper handling of the id parameter, enabling SQL injection that can be triggered remotely. Public exploits have been disclosed...

9.8CVSS8.4AI score0.00346EPSS
Exploits1References3Affected Software1
Circl
Circl
added 2022/08/05 4:20 p.m.1 views

CVE-2022-2672

creationtimestamp| type| source ---|---|--- 2022-08-05 16:20:33+00:00| seen| https://t.me/cibsecurity/47604...

8.8CVSS8.1AI score0.0031EPSS
Exploits0References1
CVE
CVE
added 2022/08/05 11:40 a.m.57 views

CVE-2022-2672

CVE-2022-2672 affects SourceCodester Garage Management System. The vulnerability is an SQL injection in an unknown function of the file createUser.php, triggered by manipulating the parameters userName/uemail. It can be exploited remotely and exploitation has been disclosed to the public (VDB-205...

8.8CVSS7.8AI score0.0031EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2022/08/05 12:0 a.m.27 views

openSUSE: Security Advisory for go1.18 (SUSE-SU-2022:2672-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.4AI score0.00155EPSS
Exploits4References2
CVE
CVE
added 2020/02/03 4:39 p.m.52 views

CVE-2013-2672

CVE-2013-2672 affects Brother MFC-9970CDW devices running firmware 0D, where passwords may be submitted in cleartext. The NVD entry documents a network-remote risk with cleartext credential exposure (CVSS v3.1 base score 7.5, high impact on confidentiality; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). N...

7.5CVSS7.6AI score0.00685EPSS
Exploits2References2Affected Software1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.62 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1484)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.2AI score0.13687EPSS
Exploits19References2
NVD
NVD
added 2020/01/15 5:15 p.m.11 views

CVE-2020-2672

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Ema...

8.2CVSS7.9AI score0.01495EPSS
Exploits0References1
CVE
CVE
added 2020/01/15 4:34 p.m.47 views

CVE-2020-2672

CVE-2020-2672 affects Oracle E-Business Suite’s Oracle Email Center (component: Message Display). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability is exploitable by an unauthenticated attacker with network access over HTTPS and requires user interaction from a person other...

8.2CVSS8.2AI score0.01495EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/07/23 10:31 p.m.88 views

CVE-2019-2672

CVE-2019-2672 affects Oracle E-Business Suite One-to-One Fulfillment Print Server. Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.8. The vulnerability allows unauthenticated, network-accessible access via HTTP, with user interaction required, potentially leading to unauthorized disclosure and m...

8.2CVSS8.1AI score0.00845EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder