Lucene search
K

43 matches found

RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-7746

A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file /productexpiry/edit-admin.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is...

6.5CVSS6.5AI score0.00036EPSS
Exploits0References1
OSV
OSV
added 2026/05/12 3:48 a.m.1 views

MINI-52X7-7746-CC35

Bulletin has no description...

6.1CVSS5.7AI score0.0001EPSS
Exploits0
OSV
OSV
added 2026/05/10 10:0 p.m.1 views

MINI-7746-H54Q-6PJF

Bulletin has no description...

9.1CVSS5.7AI score0.00188EPSS
Exploits1
Circl
Circl
added 2026/05/04 11:26 a.m.6 views

CVE-2026-7746

creationtimestamp| type| source ---|---|--- 2026-05-04 11:26:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzkte4uqu2t...

6.5CVSS5.8AI score0.00036EPSS
Exploits0References1
NVD
NVD
added 2026/05/04 9:16 a.m.5 views

CVE-2026-7746

A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file /productexpiry/edit-admin.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is...

6.5CVSS0.00036EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/05/04 8:0 a.m.28 views

CVE-2026-7746 SourceCodester Web-based Pharmacy Product Management System edit-admin.php sql injection

A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file /productexpiry/edit-admin.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is...

6.5CVSS0.00036EPSS
Exploits0References5
Circl
Circl
added 2025/09/16 10:0 a.m.1 views

CVE-2025-7746

creationtimestamp| type| source ---|---|--- 2025-09-16 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-259-01...

5.3CVSS4.8AI score0.00089EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/16 12:0 a.m.2 views

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : cipher-base vulnerability (USN-7746-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has a package installed that is affected by a vulnerability as referenced in the USN-7746-1 advisory. Nikita Skovoroda discovered that cipher-base did not properly manage certain inputs. An attacker could possibly use th...

9.1CVSS5.7AI score0.00152EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/09/11 9:30 p.m.2 views

CVE-2025-7746

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser...

5.3CVSS6.5AI score0.00089EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-7746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existi...

9.8CVSS7AI score0.00211EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 5:25 a.m.4 views

CVE-2019-7746

JioFi 4 jmr1140 AmtelJMR1140R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmapauth type=getuser request and then reading the token field. This token value can then be used to change the Wi-Fi password or perform a factory reset...

8.1CVSS7.2AI score0.0032EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2017-7746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file...

7.5CVSS7.4AI score0.02045EPSS
Exploits0References2
Circl
Circl
added 2024/08/13 6:47 p.m.0 views

CVE-2024-7746

creationtimestamp| type| source ---|---|--- 2024-08-13 18:47:34+00:00| seen| https://t.me/cvedetector/3027...

9.8CVSS4.8AI score0.00327EPSS
Exploits0References1
OSV
OSV
added 2024/08/13 4:15 p.m.9 views

CVE-2024-7746

Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the privileged transactions implemented by the Traccar solution that should otherwise be protected by the authentication mechanism. These...

9.8CVSS7.1AI score0.00327EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/08/13 3:14 p.m.22 views

CVE-2024-7746 Use of default credentials at Traccar fleet management solution

Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the privileged transactions implemented by the Traccar solution that should otherwise be protected by the authentication mechanism. These...

9.5CVSS0.00327EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/08/13 3:14 p.m.19 views

CVE-2024-7746 Use of default credentials at Traccar fleet management solution

Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the privileged transactions implemented by the Traccar solution that should otherwise be protected by the authentication mechanism. These...

9.5CVSS6.9AI score0.00327EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/12/01 10:18 a.m.28 views

Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to denial of service due to Chart.js (CVE-2020-7746)

Summary The chart.js module is shipped with IBM Tivoli Netcool Impact as part of the probable cause feature. Information about a security vulnerability affecting chart.js has been published in a security bulletin. Vulnerability Details CVEID:CVE-2020-7746 DESCRIPTION: Node.js chart.js moudle is...

9.8CVSS8.2AI score0.00211EPSS
Exploits1Affected Software1
Node.js
Node.js
added 2021/05/10 6:51 p.m.181 views

Prototype pollution in chart.js

Overview In chart.js before version 2.9.4 the options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deeply merged with provided options. However, during this operation, the keys of the object being set ar...

5CVSS3.4AI score0.00211EPSS
Exploits1Affected Software1
vulnersOsv
vulnersOsv
added 2021/05/10 6:47 p.m.2 views

2cs-basecode (>=0.1.0 <=0.1.1), 8bit-ghost-ui (>=1.0.0-beta.1 <=1.0.0-beta.3) +449 more potentially affected by CVE-2020-7746 via chart.js (>=1.0.1-beta.2 <=2.9.3)

chart.js NPM version =1.0.1-beta.2, =0.1.0, =1.0.0-beta.1, =1.0.3, =1.0.0, =2.0.0, =2.0.0, =2.0.0-0f0f22634a7788f0af51de445431d067b20eec64, =2.0.0, =1.0.0, =7.0.1, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.7.0, =0.8.0 - @cedrictrovati/spfx-controls-react-loc =1.0.0 and more Source cves: CVE-2020-7746...

9.8CVSS7.1AI score0.00211EPSS
Exploits1
IBM Security Bulletins
IBM Security Bulletins
added 2020/12/04 8:1 a.m.38 views

Security Bulletin: Denial of Service Vulnerability in Chart.js affects IBM Spectrum Protect Plus (CVE-2020-7746)

Summary The Node.js chart.js module is vulnerable to a denial of service which may affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2020-7746 DESCRIPTION: Node.js chart.js moudle is vulnerable to a denial of service, caused by a prototype pollution flaw when processing the optio...

9.8CVSS2.2AI score0.00211EPSS
Exploits1Affected Software1
Rows per page
Query Builder