Lucene search
K

65 matches found

CVE
CVE
added 2026/04/24 4:8 p.m.10 views

CVE-2026-6911

The CVE-2026-6911 issue in AWS Ops Wheel involves missing JWT signature verification, enabling unauthenticated attackers to forge tokens and gain administrative access across tenants. The vulnerability affects the API Gateway path used by Ops Wheel, with potential read/modify/delete rights over a...

9.8CVSS5.4AI score0.00042EPSS
Exploits0References3
OSV
OSV
added 2025/06/30 3:15 p.m.3 views

CVE-2025-6911

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /manage-subjects.php. The manipulation of the argument del leads to sql injection. The attack can be initiated remotely. The exploit has been...

8.8CVSS5.8AI score0.00181EPSS
Exploits1References5
Circl
Circl
added 2025/06/30 3:6 p.m.6 views

CVE-2025-6911

creationtimestamp| type| source ---|---|--- 2025-06-30 15:06:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19933 2025-06-30 17:26:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstpeakbg52i...

8.8CVSS6.2AI score0.00181EPSS
Exploits1References2
CVE
CVE
added 2025/06/30 2:32 p.m.13 views

CVE-2025-6911

The CVE-2025-6911 entry concerns PHPGurukul Student Record System 3.2. A SQL injection vulnerability exists in /manage-subjects.php via the del parameter. Attackers can exploit remotely; exploits have been disclosed publicly. Several connected reports confirm the issue and its impact on confident...

8.8CVSS6.8AI score0.00181EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/30 2:32 p.m.2 views

CVE-2025-6911 PHPGurukul Student Record System manage-subjects.php sql injection

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /manage-subjects.php. The manipulation of the argument del leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS6.8AI score0.00181EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/30 2:32 p.m.6 views

CVE-2025-6911 PHPGurukul Student Record System manage-subjects.php sql injection

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /manage-subjects.php. The manipulation of the argument del leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS0.00181EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2016-6911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dynamicGetbuf function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a craft...

5.5CVSS6.9AI score0.00641EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/07/24 12:0 a.m.16 views

Ubuntu: Security Advisory (USN-6911-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00835EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/07/23 12:0 a.m.22 views

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Nova vulnerability (USN-6911-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6911-1 advisory. Arnaud Morin discovered that Nova incorrectly handled certain raw format images. An authenticated user could use this issue to access...

6.5CVSS6AI score0.00835EPSS
Exploits1References2
Circl
Circl
added 2024/07/22 11:41 p.m.1 views

CVE-2024-6911

creationtimestamp| type| source ---|---|--- 2024-07-22 23:41:02+00:00| seen| https://t.me/cvedetector/1481...

8.7CVSS8.7AI score0.93322EPSS
Exploits2References1
NVD
NVD
added 2024/07/22 9:15 p.m.17 views

CVE-2024-6911

Files on the Windows system are accessible without authentication to external parties due to a local file inclusion in PerkinElmer ProcessPlus.This issue affects ProcessPlus: through 1.11.6507.0...

8.7CVSS0.93322EPSS
Exploits2References2
Vulnrichment
Vulnrichment
added 2024/07/22 8:44 p.m.13 views

CVE-2024-6911 Unauthenticated Local File Inclusion

Files on the Windows system are accessible without authentication to external parties due to a local file inclusion in PerkinElmer ProcessPlus.This issue affects ProcessPlus: through 1.11.6507.0...

8.7CVSS6.5AI score0.93322EPSS
Exploits2References2
Cvelist
Cvelist
added 2024/07/22 8:44 p.m.17 views

CVE-2024-6911 Unauthenticated Local File Inclusion

Files on the Windows system are accessible without authentication to external parties due to a local file inclusion in PerkinElmer ProcessPlus.This issue affects ProcessPlus: through 1.11.6507.0...

8.7CVSS0.93322EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.30 views

RHEL 5 : gd,_php (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gd, php: Stack based buffer overflow in dynamicGetbuf CVE-2016-8670 - The dynamicGetbuf function in the G...

8.2AI score0.01746EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.26 views

RHEL 7 : gd,_php (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gd, php: Stack based buffer overflow in dynamicGetbuf CVE-2016-8670 - The dynamicGetbuf function in the G...

8.2AI score0.01746EPSS
Exploits0References2
Circl
Circl
added 2024/01/12 9:11 a.m.2 views

CVE-2023-6911

creationtimestamp| type| source ---|---|--- 2024-01-12 09:11:41+00:00| seen| https://t.me/ctinow/167141...

4.8CVSS4.9AI score0.00347EPSS
Exploits0References1
OSV
OSV
added 2023/12/18 9:15 a.m.15 views

CVE-2023-6911

Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting XSS attack can be carried out by an attacker injecting a malicious payload into the Registry feature of the Management Console...

4.8CVSS5.1AI score
Exploits0References1
Cvelist
Cvelist
added 2023/12/18 8:32 a.m.15 views

CVE-2023-6911

Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting XSS attack can be carried out by an attacker injecting a malicious payload into the Registry feature of the Management Console...

4.8CVSS5.3AI score0.00347EPSS
Exploits0References1
CVE
CVE
added 2023/12/18 8:32 a.m.64 views

CVE-2023-6911

CVE-2023-6911 affects WSO2 products, with the root cause described as improper output encoding in the Registry feature of the Management Console, enabling a Stored Cross Site Scripting (XSS) payload injection. The issue is documented across multiple sources (including Red Hat, Veracode, GHSA/osv ...

4.8CVSS5AI score0.00347EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.26 views

Debian: Security Advisory (DLA-665-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.01746EPSS
Exploits0References3
Rows per page
Query Builder