Lucene search
K

78 matches found

NVD
NVD
added 2026/04/12 11:16 p.m.2 views

CVE-2026-6131

A vulnerability was found in Totolink A7100RU 7.4cu.2313b20191024. Affected by this vulnerability is the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument command results in os command injection. The attack may be launched...

10CVSS0.01823EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-5796

Malware in sbrugna...

7.8CVSS6.4AI score0.0242EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2008-5795

Malware in sbrugna...

2.6CVSS6.4AI score0.01622EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2008-5797

Malware in sbrugna...

7.5CVSS6.4AI score0.02538EPSS
Exploits0References6
Circl
Circl
added 2025/06/16 5:37 p.m.7 views

CVE-2025-6131

creationtimestamp| type| source ---|---|--- 2025-06-16 17:37:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18484 2025-06-16 19:49:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrqqtfoo2h25...

4.8CVSS3.9AI score0.0028EPSS
Exploits1References2
NVD
NVD
added 2025/06/16 5:15 p.m.9 views

CVE-2025-6131

A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site...

4.8CVSS0.0028EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/06/16 5:0 p.m.7 views

CVE-2025-6131 CodeAstro Food Ordering System POST Request Parameter edit cross site scripting

A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site...

4.8CVSS3.4AI score0.0028EPSS
Exploits1References5
CVE
CVE
added 2025/06/16 5:0 p.m.27 views

CVE-2025-6131

CodeAstro Food Ordering System 1.0 contains a cross-site scripting (XSS) vulnerability in the POST Request Parameter Handler, triggered by manipulating the Restaurant Name/Address in the /admin/store/edit/ function. The underlying issue is an input handling flaw that allows remote attackers to in...

4.8CVSS3.4AI score0.0028EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2023/11/14 5:15 p.m.7 views

CVE-2023-6131

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

8.8CVSS7.3AI score
Exploits0References2
CVE
CVE
added 2023/11/14 4:27 p.m.54 views

CVE-2023-6131

Summary: CVE-2023-6131 is a code injection vulnerability in SuiteCRM (SalesAgility) affecting versions prior to 7.14.2, 7.12.14, and 8.4.2. Affected software: SuiteCRM (SalesAgility). Root cause / vulnerability type: Code injection in the GitHub repository path for SuiteCRM. Impact (as stated): N...

8.8CVSS7.7AI score0.01003EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/11/14 4:27 p.m.15 views

CVE-2023-6131 Code Injection in salesagility/suitecrm

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

7.2CVSS9.2AI score0.01003EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.18 views

Debian: Security Advisory (DLA-298-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.3AI score0.01983EPSS
Exploits1References2
F5 Networks
F5 Networks
added 2023/02/21 6:46 p.m.29 views

K61757346: BIG-IP Azure cloud vulnerability CVE-2017-6131

Security Advisory Description In some circumstances, a BIG-IP Azure cloud instance may contain a default administrative password which can be used to remotely log in to the BIG-IP system. The affected administrative account is the Azure instance administrative user created at deployment. The root...

9.8CVSS9.6AI score0.01141EPSS
Exploits0Affected Software9
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.32 views

Ubuntu: Security Advisory (USN-4336-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.08544EPSS
Exploits67References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.33 views

Mageia: Security Advisory (MGASA-2018-0268)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.6AI score0.58822EPSS
Exploits14References15
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.28 views

Mageia: Security Advisory (MGASA-2018-0046)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS6.5AI score0.07267EPSS
Exploits2References4
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/28 6:35 p.m.27 views

Security Bulletin: Security vulnerability in IBM Jazz Team Server affects multiple IBM Rational products based on IBM Jazz technology (CVE-2014-6131, CVE-2014-6129)

Summary Security vulnerabilities have been identified in the IBM Jazz Team Server affecting the following IBM Jazz Team Server based applications: Collaborative Lifecycle Management CLM, Rational Requirements Composer RRC, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manage...

5.5CVSS0.5AI score0.01384EPSS
Exploits0Affected Software8
OSV
OSV
added 2020/09/01 2:15 p.m.13 views

CVE-2020-6131

SQL injection vulnerabilities exist in the courseperiodid parameters used in OS4Ed openSIS 7.3 pages. The courseperiodid parameter in the page MassScheduleSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities...

8.8CVSS8.1AI score
Exploits0References1
NVD
NVD
added 2020/09/01 2:15 p.m.15 views

CVE-2020-6131

SQL injection vulnerabilities exist in the courseperiodid parameters used in OS4Ed openSIS 7.3 pages. The courseperiodid parameter in the page MassScheduleSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities...

8.8CVSS7.8AI score0.01403EPSS
Exploits1References1
CVE
CVE
added 2020/09/01 1:7 p.m.43 views

CVE-2020-6131

CVE-2020-6131 relates to multiple SQL injection vulnerabilities in OS4Ed openSIS 7.3 where the course_period_id parameter across several pages (MassScheduleSessionSet.php, MassDropSessionSet.php, CpSessionSet.php) is directly interpolated into SQL queries. The root cause is lacking input sanitiza...

8.8CVSS9.1AI score0.01403EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder