Lucene search
+L

70 matches found

NVD
NVD
•added 2026/04/27 2:16 p.m.•12 views

CVE-2026-7128

A security vulnerability has been detected in SourceCodester Pharmacy Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=savetype. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has...

7.5CVSS0.00411EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/27 1:30 p.m.•47 views

CVE-2026-7128 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

A security vulnerability has been detected in SourceCodester Pharmacy Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=savetype. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has...

7.5CVSS0.00411EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/01/07 9:35 a.m.•9 views

CVE-2019-7128

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution...

10CVSS7.4AI score0.06511EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/07/09 1:07 p.m.•17 views

CVE-2025-7128

A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=calculatepayroll. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...

9.8CVSS7.5AI score0.00516EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:55 a.m.•14 views

CVE-2013-7128

Valve Bug Reporter in the valve-bugreporter package 2.10+bsos1 in Valve SteamOS Beta stores cleartext credentials in a .valve-bugreporter.cfg file upon a Remember Credentials action, which allows local users to obtain sensitive information by reading this file...

2.1CVSS6.1AI score0.00318EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2025/05/15 1:15 a.m.•21 views

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.17.29 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.29 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

8.7CVSS6.1AI score0.00418EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2016-7128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The exifprocessIFDinTIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file...

5.3CVSS7AI score0.07767EPSS
SaveExploits1References2
Circl
Circl
•added 2024/07/26 5:11 p.m.•12 views

CVE-2024-7128

creationtimestamp| type| source ---|---|--- 2024-07-26 17:11:50+00:00| seen| https://t.me/cvedetector/1686 2025-03-11 23:40:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7255 2025-05-15 01:32:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16436...

5.3CVSS5.8AI score0.00418EPSS
SaveExploits0References3
NVD
NVD
•added 2024/07/26 2:15 p.m.•30 views

CVE-2024-7128

A flaw was found in the OpenShift console. Several endpoints in the application use the authHandler and authHandlerWithUser middleware functions. When the default authentication provider "openShiftAuth" is set, these functions do not perform any authentication checks, relying instead on the...

5.3CVSS0.00418EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/07/26 1:34 p.m.•34 views

CVE-2024-7128 Openshift-console: unauthenticated data exposure

A flaw was found in the OpenShift console. Several endpoints in the application use the authHandler and authHandlerWithUser middleware functions. When the default authentication provider "openShiftAuth" is set, these functions do not perform any authentication checks, relying instead on the...

5.3CVSS0.00418EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/07/26 1:34 p.m.•14 views

CVE-2024-7128 Openshift-console: unauthenticated data exposure

A flaw was found in the OpenShift console. Several endpoints in the application use the authHandler and authHandlerWithUser middleware functions. When the default authentication provider "openShiftAuth" is set, these functions do not perform any authentication checks, relying instead on the...

5.3CVSS5.3AI score0.00418EPSS
SaveExploits0References5
Circl
Circl
•added 2023/12/28 4:26 p.m.•17 views

CVE-2023-7128

creationtimestamp| type| source ---|---|--- 2023-12-28 16:26:49+00:00| seen| https://t.me/ctinow/160093 2023-12-31 01:48:51+00:00| seen| https://t.me/arpsyndicate/2269 2024-01-05 19:17:26+00:00| seen| https://t.me/ctinow/163668 2024-01-20 08:07:16+00:00| seen| https://t.me/ctinow/170552...

8.8CVSS6.9AI score0.00701EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/12/28 3:00 p.m.•52 views

CVE-2023-7128 code-projects Voting System Admin Login sql injection

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to th...

6.3CVSS9.2AI score0.00701EPSS
SaveExploits1References3
CVE
CVE
•added 2023/12/28 3:00 p.m.•64 views

CVE-2023-7128

CVE-2023-7128 affects code-projects Voting System 1.0, specifically the Admin Login component’s /admin/ path. The issue arises from manipulating the username argument, resulting in SQL injection in an unknown processing flow of the Admin Login. Public disclosure exists. The CVSS data in the sourc...

8.8CVSS6.5AI score0.00701EPSS
SaveExploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2022/11/17 12:00 a.m.•24 views

Rocky Linux 8 : postgresql:12 (RLSA-2022:7128)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7128 advisory. - A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait fo...

8CVSS7.2AI score0.01908EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2022/10/27 12:00 a.m.•76 views

Oracle Linux 8 : postgresql:12 (ELSA-2022-7128)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7128 advisory. postgresql 12.12-1 - Resolves: 2131177 - Update to version 12.12 Tenable has extracted the preceding description block directly from the Oracle Linux security...

8CVSS7AI score0.01908EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/10/26 12:00 a.m.•27 views

RHEL 8 : postgresql:12 (RHSA-2022:7128)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7128 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: Extension scripts replace objects not...

8CVSS7.1AI score0.01908EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2022/10/25 12:00 a.m.•37 views

CentOS 8 : postgresql:12 (CESA-2022:7128)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7128 advisory. - postgresql: Extension scripts replace objects not belonging to the extension. CVE-2022-2625 Note that Nessus has not tested for this issue but has instead...

8CVSS7AI score0.01908EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•65 views

SUSE: Security Advisory (SUSE-SU-2016:2408-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7AI score0.20237EPSS
SaveExploits22References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•121 views

SUSE: Security Advisory (SUSE-SU-2016:2460-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7AI score0.16612EPSS
SaveExploits29References2
Rows per page
Query Builder