Lucene search
K

45 matches found

Circl
Circl
added 2026/04/28 12:0 a.m.4 views

CVE-2026-7155

creationtimestamp| type| source ---|---|--- 2026-04-28 00:00:45+00:00| seen| https://infosec.exchange/users/offseq/statuses/116479390119769333 2026-04-28 00:00:47+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkjbq6b5vx2o 2026-04-28 01:11:55+00:00| seen|...

10CVSS8.7AI score0.01221EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 9:59 a.m.7 views

CVE-2020-7155

A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

10CVSS8AI score0.06729EPSS
Exploits0References1
NVD
NVD
added 2025/07/08 1:15 a.m.3 views

CVE-2025-7155

A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of the argument sessionid leads to sql injection. It is possible to initiate the attack...

9.8CVSS0.00267EPSS
Exploits1References6
CVE
CVE
added 2025/07/08 1:3 a.m.15 views

CVE-2025-7155

CVE-2025-7155 affects PHPGurukul Online Notes Sharing System 1.0; the vulnerable area is the Cookie Handler’s /Dashboard file where manipulating the sessionid triggers a SQL injection. Exploitation is described as remote, with high impact on confidentiality, integrity, and availability; payloads ...

9.8CVSS7.8AI score0.00267EPSS
Exploits1References6Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 9:50 a.m.7 views

CVE-2024-7155

A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557B20221024 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. It is possible to launch the attack on the local...

4.7CVSS4.7AI score0.00067EPSS
Exploits1References1
Circl
Circl
added 2024/07/28 12:41 p.m.1 views

CVE-2024-7155

creationtimestamp| type| source ---|---|--- 2024-07-28 12:41:44+00:00| seen| https://t.me/cvedetector/1769...

4.7CVSS3.9AI score0.00067EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/07/28 10:0 a.m.11 views

CVE-2024-7155 TOTOLINK A3300R shadow.sample hard-coded password

A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557B20221024 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. It is possible to launch the attack on the local...

2.5CVSS6.5AI score0.00067EPSS
Exploits1References4
Circl
Circl
added 2023/12/29 6:26 a.m.1 views

CVE-2023-7155

creationtimestamp| type| source ---|---|--- 2023-12-29 06:26:41+00:00| seen| https://t.me/ctinow/160351 2023-12-30 01:34:41+00:00| seen| https://t.me/cibsecurity/73901 2024-01-03 08:16:50+00:00| seen| https://t.me/ctinow/162243 2024-01-20 12:46:34+00:00| seen| https://t.me/ctinow/170607...

8.8CVSS6.9AI score0.00123EPSS
Exploits1References4
NVD
NVD
added 2023/12/29 5:15 a.m.10 views

CVE-2023-7155

A vulnerability, which was classified as critical, was found in SourceCodester Free and Open Source Inventory Management System 1.0. This affects an unknown part of the file /ample/app/action/editproduct.php. The manipulation of the argument id leads to sql injection. It is possible to initiate t...

8.8CVSS0.00123EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/12/29 5:0 a.m.20 views

CVE-2023-7155 SourceCodester Free and Open Source Inventory Management System edit_product.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Free and Open Source Inventory Management System 1.0. This affects an unknown part of the file /ample/app/action/editproduct.php. The manipulation of the argument id leads to sql injection. It is possible to initiate t...

6.5CVSS9.1AI score0.00123EPSS
Exploits1References3
CVE
CVE
added 2023/12/29 5:0 a.m.41 views

CVE-2023-7155

The CVE-2023-7155 entry affects SourceCodester Free and Open Source Inventory Management System 1.0. A SQL injection exists in the vulnerable file /ample/app/action/edit_product.php, exploitable by manipulating the id parameter. The issue enables remote exploitation and has publicly disclosed exp...

8.8CVSS7.8AI score0.00123EPSS
Exploits1References3Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2014:1691-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.7AI score0.01649EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2014:1318-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS8.9AI score0.03838EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2014:1732-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.7AI score0.01649EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2014:1710-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS6.7AI score0.02355EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2016:2589-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.00861EPSS
Exploits0References23
CVE
CVE
added 2020/10/19 5:38 p.m.70 views

CVE-2020-7155

The CVE-2020-7155 entry concerns Hewlett Packard Enterprise Intelligent Management Center (iMC) prior to PLAT 7.3 (E0705P07). A vulnerability in the select expression language allows remote code execution via the beanName parameter handled by the select.xhtml endpoint, due to improper input valid...

10CVSS9.8AI score0.06729EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/17 2:10 p.m.5 views

CVE-2018-7155

...

Exploits0
CVE
CVE
added 2019/04/16 9:47 p.m.47 views

CVE-2019-7155

GitLab CVE-2019-7155 affects Community and Enterprise Edition 9.x, 10.x, and 11.x (before 11.5.8, 11.6.x before 11.6.6, 11.7.x before 11.7.1). Root cause is Incorrect Access Control: a user can retain their project role in a private group after being removed from the group if their project privil...

6.5CVSS6.4AI score0.00123EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2019/04/16 9:47 p.m.14 views

CVE-2019-7155

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. A user retains their role within a project in a private group after being removed from the group, if their...

6.9AI score0.00123EPSS
Exploits1References2
Rows per page
Query Builder