Lucene search
K

45 matches found

NVD
NVD
added 2025/06/30 10:15 p.m.3 views

CVE-2025-6930

A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/manage-foreigners-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS0.00268EPSS
Exploits1References5
Circl
Circl
added 2025/06/30 10:6 p.m.4 views

CVE-2025-6930

creationtimestamp| type| source ---|---|--- 2025-06-30 22:06:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19981 2025-07-01 01:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsujk6mthx2k...

8.8CVSS6.2AI score0.00268EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/06/30 10:2 p.m.5 views

CVE-2025-6930 PHPGurukul Zoo Management System manage-foreigners-ticket.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/manage-foreigners-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

6.5CVSS0.00268EPSS
Exploits1References5
CVE
CVE
added 2025/06/30 10:2 p.m.16 views

CVE-2025-6930

CVE-2025-6930 affects PHPGurukul Zoo Management System 2.1. The vulnerability is a SQL injection in the file /admin/manage-foreigners-ticket.php triggered by manipulating the ID parameter. The issue is exploitable remotely and has public disclosure. Connected sources describe the affected file an...

8.8CVSS6.8AI score0.00268EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 8:0 a.m.4 views

CVE-2024-6930

The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute within the plugin's bookingform shortcode in all versions up to, and including, 10.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This...

6.4CVSS5.8AI score0.00346EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2018-6930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remote attacker to cause ...

6.5CVSS7.1AI score0.00571EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/31 12:0 a.m.28 views

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : OpenJDK 11 vulnerabilities (USN-6930-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6930-1 advisory. It was discovered that the Hotspot component of OpenJDK 11 was not properly performing bounds when handling certain UTF-8 strings...

7.4CVSS7.6AI score0.00977EPSS
Exploits0References7
Circl
Circl
added 2024/07/24 10:47 a.m.0 views

CVE-2024-6930

creationtimestamp| type| source ---|---|--- 2024-07-24 10:47:46+00:00| seen| https://t.me/cvedetector/1550...

6.4CVSS4.8AI score0.00346EPSS
Exploits0References1
OSV
OSV
added 2024/07/24 8:15 a.m.1 views

CVE-2024-6930

The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute within the plugin's bookingform shortcode in all versions up to, and including, 10.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This...

5.4CVSS6AI score0.00346EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/07/24 7:31 a.m.14 views

CVE-2024-6930 WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode

The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute within the plugin's bookingform shortcode in all versions up to, and including, 10.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This...

6.4CVSS0.00346EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/07/24 7:31 a.m.9 views

CVE-2024-6930 WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode

The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute within the plugin's bookingform shortcode in all versions up to, and including, 10.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This...

6.4CVSS5.8AI score0.00346EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/07/24 12:0 a.m.9 views

WordPress Booking Calendar Plugin <= 10.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Booking Calendar Type Plugin Vulnerable versions = 10.2.1 Fixed in 10.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6930 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID be4e48bd573a Credits Arkadiusz Hydzik...

6.4CVSS5.8AI score0.00346EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2023/12/20 1:53 p.m.0 views

CVE-2023-6930

creationtimestamp| type| source ---|---|--- 2023-12-20 13:53:28+00:00| seen| https://t.me/ctinow/156993 2024-01-13 09:16:48+00:00| seen| https://t.me/ctinow/167760...

9.8CVSS8.7AI score0.00015EPSS
Exploits1References2
CVE
CVE
added 2023/12/19 11:4 p.m.32 views

CVE-2023-6930

CVE-2023-6930 concerns EuroTel ETL3100 variants v01c01/v01x37, affected by an unauthenticated configuration and log download vulnerability (Insecure Access/Improper Access Control). The root cause is unauthenticated access to configuration and logs, enabling an attacker to disclose sensitive info...

9.8CVSS9.5AI score0.00015EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/02/25 11:32 a.m.14 views

CVE-2020-6930

CVE-2020-6930 entry is linked to a concrete HP Sure Sense elevation of privilege issue (HP PSRT HPSBHF03711 rev. 3). HP identifies a potential vulnerability in Sure Sense that could allow elevation of privilege; HP has released mitigations via updates/SoftPaqs with minimum versions for affected p...

7.2AI score
Exploits0
CVE
CVE
added 2020/12/18 7:19 a.m.41 views

CVE-2020-27640

CVE-2020-27640 affects Mitel MiVoice 6940 and 6930 MiNet Bluetooth handsets running firmware earlier than 1.5.3. An unauthenticated attacker within Bluetooth range can pair a rogue device when the handset loses connection due to an improper pairing mechanism, enabling potential eavesdropping on c...

8.1CVSS8AI score0.00285EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:0 a.m.101 views

Fedora 28 : drupal8 (2018-906ba26b4d) (Drupalgeddon 2)

8.4.6 - SA-CORE-2018-002 CVE-2018-7600 - 8.4.5 - SA-CORE-2018-001 CVE-2017-6926 / CVE-2017-6927 / CVE-2017-6930 / CVE-2017-6931 - 8.4.4 - 8.4.3 - 8.4.2 - 8.4.1 - 8.4.0 - 8.4.0-rc2 - 8.4.0-rc1 - 8.4.0-beta1 - 8.4.0-alpha1 Note that Tenable Network Security has extracted the preceding description...

9.8CVSS7.4AI score0.94489EPSS
Exploits46References6
OpenVAS
OpenVAS
added 2018/05/12 12:0 a.m.39 views

Fedora Update for drupal8 FEDORA-2018-1ba93b3144

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.94489EPSS
Exploits58References4
OpenVAS
OpenVAS
added 2018/04/25 12:0 a.m.74 views

Fedora Update for drupal8 FEDORA-2018-6e6d8c314b

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.94489EPSS
Exploits46References4
OpenVAS
OpenVAS
added 2018/04/25 12:0 a.m.37 views

Fedora Update for drupal8 FEDORA-2018-922cc2fbaa

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.94489EPSS
Exploits53References4
Rows per page
Query Builder