20 matches found
CVE-2026-7681
A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an unknown functionality of the file backend/webserver/api/datasets.py of the component Dataset API. The manipulation of the argument DatasetId leads to authorization bypass. The...
Ubuntu: Security Advisory (USN-7681-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-7681
A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The attack can be initiate...
CVE-2024-7681
creationtimestamp| type| source ---|---|--- 2024-08-12 15:56:11+00:00| seen| https://t.me/cvedetector/2829...
CVE-2024-7681 code-projects College Management System Login Page login.php sql injection
A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The attack can be initiate...
CVE-2024-7681 code-projects College Management System Login Page login.php sql injection
A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The attack can be initiate...
CVE-2020-7681
This affects all versions of package marscode. There is no path sanitization in the path provided at fs.readFile in index.js...
CVE-2020-7681 Directory Traversal
This affects all versions of package marscode. There is no path sanitization in the path provided at fs.readFile in index.js...
CVE-2020-7681
CVE-2020-7681: Directory traversal in marscode due to lack of path sanitization in the file path used by fs.readFile in index.js. Affected: all versions of marscode. The vulnerability allows accessing files outside the intended directory; several sources (GHSA, CNVD, NVD, OSV, PRION, Snyk) confir...
CVE-2018-7681
Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system...
CVE-2018-7681
Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. If the user has certain administrative privileges then this vulnerability can impact other users in the system...
CVE-2018-7681
Micro Focus Solutions Business Manager (SBM) prior to version 11.4 is affected by a cross-site scripting (XSS) vulnerability that allows JavaScript to be embedded in URLs placed in the Favorites folder. The issue can impact other users when an administrator with sufficient privileges interacts wi...
CVE-2017-7681
Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end...
CVE-2017-7681
Apache OpenMeetings 1.0.0 is vulnerable to SQL injection (CVE-2017-7681), enabling authenticated users to modify query structures and disclose data from other queries. Multiple connected sources confirm the issue and state that it is fixed in version 3.3.0. Affected component: OpenMeetings server...
CVE-2016-7681
CVE-2016-7681 is rejected; this entry is not used.
CVE-2015-7681
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn. Notes: none...
CVE-2015-7681
CVE-2015-7681 is rejected/not used; this candidate was withdrawn.
CVE-2014-7681
CVE-2014-7681 affects the VMware vForums 2014 Android app (package com.coreapps.android.followme.vmwarevforums), version 6.0.9.4. Root cause: the app does not verify X.509 certificates from SSL/TLS servers, allowing man-in-the-middle attackers to spoof servers and access sensitive information via...