Lucene search
K

55 matches found

Circl
Circl
added 2025/06/20 10:44 a.m.1 views

CVE-2025-6331

creationtimestamp| type| source ---|---|--- 2025-06-20 10:44:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18930...

8.8CVSS4.8AI score0.00197EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/06/20 10:0 a.m.7 views

CVE-2025-6331 PHPGurukul Directory Management System search-directory.php sql injection

A vulnerability classified as critical was found in PHPGurukul Directory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/search-directory.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched...

6.5CVSS0.00197EPSS
Exploits1References5
CVE
CVE
added 2025/06/20 10:0 a.m.11 views

CVE-2025-6331

CVE-2025-6331 affects PHPGurukul Directory Management System v1.0. The vulnerability is an SQL injection in the /admin/search-directory.php endpoint, caused by unsafely handling the searchdata parameter. The issue can be exploited remotely and the exploit has been publicly disclosed, potentially ...

8.8CVSS6.8AI score0.00197EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 3:40 p.m.4 views

CVE-2020-6331

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS6.8AI score0.00373EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 3:5 a.m.5 views

CVE-2024-6331

stitionai/devika main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f is vulnerable to Local File Read LFI by Prompt Injection. The integration of Google Gimini 1.0 Pro with HarmBlockThreshold.BLOCKNONE for HarmCategory.HARMCATEGORYHATESPEECH and HarmCategory.HARMCATEGORYHARASSMENT i...

7.5CVSS7.5AI score0.00168EPSS
Exploits1References1
Circl
Circl
added 2024/08/04 2:47 a.m.0 views

CVE-2024-6331

creationtimestamp| type| source ---|---|--- 2024-08-04 02:47:52+00:00| seen| https://t.me/cvedetector/2405...

7.5CVSS4.8AI score0.00168EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/08/04 12:0 a.m.19 views

CVE-2024-6331 Injection by Prompt Injection in stitionai/devika

stitionai/devika main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f is vulnerable to Local File Read LFI by Prompt Injection. The integration of Google Gimini 1.0 Pro with HarmBlockThreshold.BLOCKNONE for HarmCategory.HARMCATEGORYHATESPEECH and HarmCategory.HARMCATEGORYHARASSMENT i...

7.5CVSS0.00168EPSS
Exploits1References1
CVE
CVE
added 2024/08/04 12:0 a.m.32 views

CVE-2024-6331

CVE-2024-6331 affects stitionai/devika: Local File Read via Prompt Injection on the main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f. The issue stems from prompt-injection allowing execution of commands that can read sensitive files (e.g., /etc/passwd) due to HarmBlockThreshold.B...

7.5CVSS7.6AI score0.00168EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2024/01/29 2:47 p.m.1 views

CVE-2023-6331

creationtimestamp| type| source ---|---|--- 2024-01-29 14:47:33+00:00| seen| https://t.me/truesecator/5347...

4.8AI score
Exploits0References1
OpenVAS
OpenVAS
added 2023/09/01 12:0 a.m.25 views

Ubuntu: Security Advisory (USN-6331-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.2AI score0.0844EPSS
Exploits4References2
AlpineLinux
AlpineLinux
added 2021/10/25 10:5 p.m.31 views

CVE-2021-41105

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. When handling SRTP calls, FreeSWITCH prior to version 1.10.7 is susceptible to a DoS where calls can be terminated...

7.5CVSS7.5AI score0.0442EPSS
Exploits3
CVE
CVE
added 2020/09/09 12:50 p.m.34 views

CVE-2020-6331

CVE-2020-6331 affects SAP 3D Visual Enterprise Viewer 9 via the HPGL parsing component (hpgl plugin). The root cause is improper input validation in HPGL file handling, which can lead to an out-of-bounds write and, per ZDI, remote code execution; other sources note the issue can crash the applica...

4.3CVSS4.5AI score0.00373EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2020/09/09 12:50 p.m.15 views

CVE-2020-6331

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS4.6AI score0.00373EPSS
Exploits0References3
CVE
CVE
added 2020/01/09 6:28 p.m.36 views

CVE-2019-6331

The CVE-2019-6331 issue affects Samsung Mobile Print (Android)

3.3CVSS4.2AI score0.0011EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2018/12/31 11:29 p.m.14 views

CVE-2018-6331

Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01...

9.8CVSS9.6AI score0.00893EPSS
Exploits0References1
Cvelist
Cvelist
added 2018/12/31 11:0 p.m.17 views

CVE-2018-6331

Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01...

9.6AI score0.00893EPSS
Exploits0References1
CVE
CVE
added 2018/12/31 11:0 p.m.47 views

CVE-2018-6331

The Buck CVE-2018-6331 issue concerns the Buck parser-cache command, which loads/saves state using Java serialized objects. If the serialized state is maliciously crafted, deserializing it could lead to code execution. Affected products/versions: Buck versions prior to v2018.06.25.01. This is tie...

9.8CVSS9.5AI score0.00893EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2018/12/31 11:0 p.m.8 views

CVE-2018-6331

Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01...

9.6AI score0.00893EPSS
Exploits0References1
CVE
CVE
added 2018/07/31 8:0 p.m.54 views

CVE-2018-14311

CVE-2018-14311 affects Foxit Reader (and Foxit PhantomPDF) via a type confusion in XFA event handling. The flaw arises from improper validation of user-supplied data, enabling remote code execution when a user opens a malicious file or visits a crafted page. Exploitation requires user interaction...

8.8CVSS8.8AI score0.0025EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2018/07/31 8:0 p.m.13 views

CVE-2018-14311

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA...

8.8AI score0.0025EPSS
Exploits0References2
Rows per page
Query Builder