Lucene search
K

30 matches found

NVD
NVD
added 2026/05/02 2:16 p.m.1 views

CVE-2026-7631

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS0.00047EPSS
Exploits0References5
CVE
CVE
added 2026/05/02 1:30 p.m.2 views

CVE-2026-7631

The CVE affects code-projects Online Hospital Management System 1.0, specifically the Registration Handler’s unknown function. The vulnerability arises from manipulation of the Username parameter, resulting in improper authorization. It can be exploited remotely, with public exploit availability....

5.5CVSS5.7AI score0.00047EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/05/02 1:30 p.m.4 views

CVE-2026-7631 code-projects Online Hospital Management System Registration improper authorization

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS5.7AI score0.00047EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/02/18 1:28 p.m.1 views

CVE-2025-7631

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co. Tumeva Prime News Software allows SQL Injection.This issue affects Tumeva Prime News Software:...

8.6CVSS5.8AI score0.00013EPSS
Exploits0References1
Circl
Circl
added 2026/02/17 12:44 p.m.3 views

CVE-2025-7631

creationtimestamp| type| source ---|---|--- 2026-02-17 12:44:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2lr3oumq2t...

8.6CVSS5.1AI score0.00013EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/10/01 12:0 a.m.5 views

Delta Electronics DIALink Directory Traversal Authentication Bypass Vulnerability

This vulnerability allows remote attackers to overwrite configuration files on affected installations of Delta Electronics DIALink. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 7631 by default. The issue...

7.3CVSS7AI score0.0011EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/10/01 12:0 a.m.5 views

Delta Electronics DIALink Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIALink. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DataCenter service, which listens on TCP port 7631 by default. The issue...

10CVSS7.6AI score0.00094EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-7631 Malicious code in @crabas0npm2/autem-eveniet-maiores (npm)

The package @crabas0npm2/autem-eveniet-maiores was found to contain malicious code...

7.2AI score
Exploits0
Circl
Circl
added 2025/03/19 7:18 p.m.2 views

CVE-2024-7631

creationtimestamp| type| source ---|---|--- 2025-03-19 19:18:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8122 2025-03-19 20:48:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkr2mydfrj2w 2025-05-06 16:21:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15144...

4.3CVSS4.9AI score0.00058EPSS
Exploits0References3
NVD
NVD
added 2025/03/19 7:15 p.m.4 views

CVE-2024-7631

A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...

4.3CVSS0.00058EPSS
Exploits0References3
CVE
CVE
added 2025/03/19 6:47 p.m.90 views

CVE-2024-7631

OpenShift Console CVE-2024-7631 describes a path traversal flaw in the locales/resources.json endpoint where lng/ns are used to build a file path in pkg/plugins/handlers unsafely.go, allowing an authenticated user to read arbitrary JSON files on the console pod by using ../ sequences. Connected d...

4.3CVSS4.5AI score0.00058EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/03/19 6:47 p.m.9 views

CVE-2024-7631 Openshift-console: openshift console: path traversal

A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...

4.3CVSS0.00058EPSS
Exploits0References3
CVE
CVE
added 2020/04/06 12:18 p.m.46 views

CVE-2020-7631

Diskusage-ng (npm package) vulnerability CVE-2020-7631: versions up to 0.2.4 are vulnerable to Command Injection via the path argument due to unsanitized input. Impact: arbitrary commands may be executed with the affected code path. Root cause: user-controlled path parameter not sanitized before ...

9.8CVSS9.7AI score0.01227EPSS
Exploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.7 views

GE EP-7631 RSTi-EP Power Module Detection

Binary data 755542.prm...

7.3AI score
Exploits0
Circl
Circl
added 2018/10/29 6:6 p.m.5 views

CVE-2018-7631

creationtimestamp| type| source ---|---|--- 2018-10-29 18:06:54+00:00| seen| MISP/5bd74bce-49a8-4b61-986e-659b0a021402...

9.8CVSS7AI score0.00964EPSS
Exploits1
NVD
NVD
added 2018/10/09 10:29 p.m.5 views

CVE-2018-7631

Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leading "/" and without authentication...

9.8CVSS9.5AI score0.00964EPSS
Exploits1References1
CVE
CVE
added 2018/10/09 10:0 p.m.38 views

CVE-2018-7631

CVE-2018-7631 involves a buffer overflow in the httpd component of EpiCentro firmware (E_7.3.2+) that allows remote code execution via a specially crafted GET request lacking a leading '/' and without authentication. Multiple connected sources corroborate the issue, describing an RCE risk tied to...

9.8CVSS9.4AI score0.00964EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2018/03/27 9:0 p.m.47 views

CVE-2017-7631

CVE-2017-7631 is a cross-site scripting (XSS) vulnerability in QNAP’s File Station share link feature. Affects QNAP devices running File Station on QTS 4.3.3 (build 20170727) and earlier, and QNAP 4.2.6 (build 20171026) as cited. The root cause described across sources is that remote attackers ca...

6.1CVSS6.1AI score0.00303EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/03/27 9:0 p.m.11 views

CVE-2017-7631

Cross-site scripting XSS vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML...

6.1AI score0.00303EPSS
Exploits0References1
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.9 views

CVE-2016-7631

...

Exploits0
Rows per page
Query Builder