Lucene search
K

109 matches found

Cvelist
Cvelist
added 2026/04/09 4:0 a.m.30 views

CVE-2026-5840 PHPGurukul News Portal Project check_availability.php sql injection

A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown function of the file /admin/checkavailability.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

5.8CVSS0.00202EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/09 4:0 a.m.2 views

CVE-2026-5840

A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown function of the file /admin/checkavailability.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

5.8CVSS5.7AI score0.00202EPSS
Exploits0References5Affected Software1
Circl
Circl
added 2026/04/08 8:16 p.m.6 views

CVE-2026-5840

creationtimestamp| type| source ---|---|--- 2026-04-08 20:16:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5840...

5.8CVSS5.3AI score0.00202EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/06/08 2:55 p.m.376 views

Exploit for Improper Access Control in Lerouxyxchire Client_Database_Management_System

CVE-2025-5840 CVE-2025-5840 Exploit In Python By hax / haxerr9...

7.5CVSS7.2AI score0.00378EPSS
Exploits2
Circl
Circl
added 2025/06/07 7:30 p.m.13 views

CVE-2025-5840

creationtimestamp| type| source ---|---|--- 2025-06-07 19:30:35+00:00| published-proof-of-concept| Telegram/CgZLbluEils9Yoke5ZMsc95ACgclikTiOZse0q2GeOXMrYk 2025-06-07 21:03:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr2aqgccso2s 2025-06-08 15:02:18+00:00|...

7.5CVSS7.1AI score0.00378EPSS
Exploits2References2
Vulnrichment
Vulnrichment
added 2025/06/07 6:0 p.m.7 views

CVE-2025-5840 SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS7.2AI score0.00378EPSS
Exploits2References5
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2024-5840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium...

6.5CVSS7.4AI score0.00408EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2017-5840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service...

7.5CVSS6.5AI score0.04717EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/01/10 12:0 a.m.7 views

Debian: Security Advisory (DSA-5840-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.07435EPSS
Exploits1References2
0day.today
0day.today
added 2024/10/11 12:0 a.m.321 views

ABB Cylon Aspect 3.07.02 user.properties Default Credentials Vulnerability

ABB Cylon Aspect version 3.07.02 uses a weak set of default administrative credentials that can be guessed in remote password attacks and used to gain full control of the system. ABB Cylon Aspect 3.07.02 user.properties Default Credentials Vendor: ABB Ltd. Product web page: https://www.global.abb...

7.9AI score
Exploits0
Packet Storm
Packet Storm
added 2024/10/11 12:0 a.m.347 views

ABB Cylon Aspect 3.07.02 user.properties Default Credentials

ABB Cylon Aspect 3.07.02 user.properties Default Credentials Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.07.02 Summary: ASPECT is an award-winning scalable building energy management and...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/07/22 12:0 a.m.23 views

openSUSE 15 Security Update : opera (openSUSE-SU-2024:0205-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0205-1 advisory. - Update to 112.0.5197.25 CHR-9787 Update Chromium on desktop-stable-126-5197 to 126.0.6478.127 - The update to chromium 126.0.6478.127 fixes...

8.8CVSS7.6AI score0.00924EPSS
Exploits5References45
OpenVAS
OpenVAS
added 2024/06/21 12:0 a.m.43 views

Mageia: Security Advisory (MGASA-2024-0230)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.1AI score0.00924EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2024/06/14 12:0 a.m.30 views

Fedora 39 : chromium (2024-86e4115138)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-86e4115138 advisory. update to 126.0.6478.55 High CVE-2024-5830: Type Confusion in V8 High CVE-2024-5831: Use after free in Dawn High CVE-2024-5832: Use after free in Da...

8.8CVSS8AI score0.00924EPSS
Exploits1References19
Tenable Nessus
Tenable Nessus
added 2024/06/14 12:0 a.m.28 views

Fedora 40 : chromium (2024-5acee8c47f)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5acee8c47f advisory. update to 126.0.6478.55 High CVE-2024-5830: Type Confusion in V8 High CVE-2024-5831: Use after free in Dawn High CVE-2024-5832: Use after free in Da...

8.8CVSS8AI score0.00924EPSS
Exploits1References19
Microsoft CVE
Microsoft CVE
added 2024/06/13 7:0 a.m.30 views

Chromium: CVE-2024-5840 Policy Bypass in CORS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.2AI score0.00408EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2024/06/13 4:0 a.m.9 views

SUSE CVE-2024-5840

Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS8.6AI score0.00408EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2024/06/13 12:0 a.m.54 views

Microsoft Edge (Chromium) < 126.0.2592.56 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 126.0.2592.56. It is, therefore, affected by multiple vulnerabilities as referenced in the June 13, 2024 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2024-30058, CVE-2024-38083 - Type Confusion ...

8.8CVSS7.7AI score0.00924EPSS
Exploits1References41
OpenVAS
OpenVAS
added 2024/06/13 12:0 a.m.23 views

Google Chrome Security Update (stable-channel-update-for-desktop-2024-06) - MAC OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS8.8AI score0.00924EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2024/06/13 12:0 a.m.27 views

Google Chrome Security Update (stable-channel-update-for-desktop-2024-06) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS8.8AI score0.00924EPSS
Exploits1References1
Rows per page
Query Builder