Lucene search
K

44 matches found

OSV
OSV
added 2025/08/14 7:16 p.m.1 views

MAL-2025-6905 Malicious code in @identity-authn/authn-js-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
NVD
NVD
added 2025/06/30 12:15 p.m.4 views

CVE-2025-6905

A vulnerability, which was classified as critical, has been found in code-projects Car Rental System 1.0. This issue affects some unknown processing of the file /signup.php. The manipulation of the argument fname leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS0.00204EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/30 11:32 a.m.6 views

CVE-2025-6905 code-projects Car Rental System signup.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Car Rental System 1.0. This issue affects some unknown processing of the file /signup.php. The manipulation of the argument fname leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS0.00204EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 4:16 a.m.3 views

CVE-2023-6905

A vulnerability, which was classified as problematic, has been found in Jahastech NxFilter 4.3.2.5. This issue affects some unknown processing of the file user,adap.jsp?actionFlag=test=1 of the component Bind Request Handler. The manipulation leads to ldap injection. The attack may be initiated...

9.8CVSS7.3AI score0.00074EPSS
Exploits0
OpenVAS
OpenVAS
added 2024/07/24 12:0 a.m.23 views

Ubuntu: Security Advisory (USN-6905-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.01982EPSS
Exploits0References2
NVD
NVD
added 2024/07/19 9:15 a.m.14 views

CVE-2024-6905

A vulnerability has been found in SourceCodester Record Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file viewinfouser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

8.8CVSS0.00097EPSS
Exploits1References4
CVE
CVE
added 2024/07/19 9:0 a.m.47 views

CVE-2024-6905

The CVE-2024-6905 entry concerns SourceCodester Record Management System 1.0. It affects the code path in the file view_info_user.php, where manipulating the id argument leads to SQL injection. The vulnerability can be triggered remotely, and the exploit has been disclosed publicly. Multiple sour...

8.8CVSS6.9AI score0.00097EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/19 9:0 a.m.15 views

CVE-2024-6905 SourceCodester Record Management System view_info_user.php sql injection

A vulnerability has been found in SourceCodester Record Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file viewinfouser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS7.5AI score0.00097EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/07/19 9:0 a.m.21 views

CVE-2024-6905 SourceCodester Record Management System view_info_user.php sql injection

A vulnerability has been found in SourceCodester Record Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file viewinfouser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS0.00097EPSS
Exploits1References4
OSV
OSV
added 2024/01/24 8:23 p.m.4 views

MAL-2024-796 Malicious code in wlwz-2312-6905 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1a802a0d2fd1148a56bf2e5d0dd4bed0b02943ee8dbab79e8eed6dfe624ae54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.2 views

Malicious code in wlwz-2312-6905 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1a802a0d2fd1148a56bf2e5d0dd4bed0b02943ee8dbab79e8eed6dfe624ae54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Circl
Circl
added 2024/01/12 12:56 a.m.3 views

CVE-2023-6905

creationtimestamp| type| source ---|---|--- 2024-01-12 00:56:42+00:00| seen| https://t.me/ctinow/166983...

9.8CVSS5.4AI score0.00074EPSS
Exploits0References1
CVE
CVE
added 2023/12/17 11:31 p.m.44 views

CVE-2023-6905

The CVE-2023-6905 entry affects Jahastech NxFilter 4.3.2.5, specifically the Bind Request Handler’s file processing of user,adap.jsp?actionFlag=test&id=1, which enables LDAP injection. Exploitation can be remote and does not require user interaction. The issue is caused by improper handling withi...

9.8CVSS7.2AI score0.00074EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/12/17 11:31 p.m.16 views

CVE-2023-6905 Jahastech NxFilter Bind Request ldap injection

A vulnerability, which was classified as problematic, has been found in Jahastech NxFilter 4.3.2.5. This issue affects some unknown processing of the file user,adap.jsp?actionFlag=test&id=1 of the component Bind Request Handler. The manipulation leads to ldap injection. The attack may be initiate...

4.3CVSS9.9AI score0.00074EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2016:2303-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.6AI score0.12098EPSS
Exploits0References10
CVE
CVE
added 2021/01/05 5:21 p.m.23 views

CVE-2020-6905

CVE-2020-6905 entry is rejected/not used; the candidate was not associated with a vulnerability in 2020.

6.9AI score
Exploits0
Cvelist
Cvelist
added 2021/01/05 5:21 p.m.14 views

CVE-2020-6905

...

Exploits0
CVE
CVE
added 2018/04/08 5:0 p.m.46 views

CVE-2018-6905

CVE-2018-6905 affects TYPO3 page module up to versions prior to 8.7.11 and 9.1.0, enabling cross-site scripting via the global setting TYPO3_CONF_VARS[SYS][sitename] when an admin enters a crafted site name during installation. The vulnerability is a client-controlled reflection in the site name ...

4.8CVSS4.6AI score0.02274EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.9 views

CVE-2015-6905

...

Exploits0
CVE
CVE
added 2017/05/11 2:1 p.m.26 views

CVE-2015-6905

CVE-2015-6905 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

7.4AI score
Exploits0
Rows per page
Query Builder