Lucene search
+L

463 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 7:56 a.m.•12 views

CVE-2024-33297

Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name Internal Name field in the Add new campaign function...

4.7CVSS7.2AI score0.01109EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:11 a.m.•19 views

CVE-2023-39714

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Member section...

6.1CVSS6.1AI score0.0064EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:02 a.m.•12 views

CVE-2023-1946

A vulnerability was found in SourceCodester Survey Application System 1.0 and classified as problematic. This issue affects some unknown processing of the component Add New Handler. The manipulation of the argument Title with the input leads to cross site scripting. The attack may be initiated...

6.1CVSS5.9AI score0.00357EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:57 a.m.•16 views

CVE-2023-1062

A vulnerability, which was classified as critical, was found in SourceCodester Doctors Appointment System 1.0. Affected is an unknown function of the file /admin/add-new.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. It is possible to launch...

8.8CVSS7.8AI score0.007EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:16 a.m.•16 views

CVE-2022-45215

A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the Add New System User module...

5.4CVSS5.8AI score0.00402EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:15 a.m.•27 views

CVE-2022-44951

Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the Add New Form tab function at /index.php?module=entities/formsid=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

5.4CVSS5.8AI score0.00992EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:15 a.m.•17 views

CVE-2022-44950

Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the Add New Field function at /index.php?module=entities/fieldsid=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

5.4CVSS5.8AI score0.00992EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:27 p.m.•14 views

CVE-2022-40472

ZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to contain a CSV injection vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module...

8CVSS8.3AI score0.01119EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:07 p.m.•20 views

CVE-2022-3548

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Add New Storage Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be...

4.8CVSS6.4AI score0.00557EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:59 p.m.•15 views

CVE-2022-44949

Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the Add New Field function at /index.php?module=entities/fieldsid=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Short Name fie...

5.4CVSS5.8AI score0.00992EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:48 p.m.•14 views

CVE-2021-3351

OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page...

5.4CVSS5.7AI score0.0052EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:31 p.m.•16 views

CVE-2020-23974

Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Messagetitle-tag, Add new client all-tags...

5.4CVSS6.8AI score0.00597EPSS
SaveExploits1
OSV
OSV
•added 2025/05/09 5:15 p.m.•14 views

CVE-2025-4480

A vulnerability was found in code-projects Simple College Management System 1.0. It has been declared as critical. This vulnerability affects the function input of the component Add New Student. The manipulation of the argument name/branch leads to stack-based buffer overflow. It is possible to...

7.8CVSS6AI score0.00395EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/09 4:31 p.m.•15 views

CVE-2025-4480 code-projects Simple College Management System Add New Student input stack-based overflow

A vulnerability was found in code-projects Simple College Management System 1.0. It has been declared as critical. This vulnerability affects the function input of the component Add New Student. The manipulation of the argument name/branch leads to stack-based buffer overflow. It is possible to...

5.3CVSS5.4AI score0.00395EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/09 4:31 p.m.•51 views

CVE-2025-4480 code-projects Simple College Management System Add New Student input stack-based overflow

A vulnerability was found in code-projects Simple College Management System 1.0. It has been declared as critical. This vulnerability affects the function input of the component Add New Student. The manipulation of the argument name/branch leads to stack-based buffer overflow. It is possible to...

5.3CVSS0.00395EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/05/09 12:00 a.m.•21 views

PT-2025-20579 · Unknown · Code-Projects College Management System

Name of the Vulnerable Software and Affected Versions: code-projects Simple College Management System version 1.0 Description: A critical issue affects the Add New Student component, specifically the function input. The manipulation of the name/branch argument leads to a stack-based buffer...

7.8CVSS5.3AI score0.00395EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/09 12:00 a.m.•2 views

CVE-2025-4480: Stack-based Buffer Overflow

A vulnerability was found in code-projects Simple College Management System 1.0. It has been declared as critical. This vulnerability affects the function input of the component Add New Student. The manipulation of the argument name/branch leads to stack-based buffer overflow. It is possible to...

7.8CVSS6AI score0.00395EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/09 12:00 a.m.•15 views

Code-Projects Simple College Management System 安全漏洞

Code-Projects Simple College Management System is a Code-Projects open source simple college management system. A security vulnerability exists in Code-Projects Simple College Management System version 1.0, which is caused by a stack-based buffer overflow due to the name/branch operation of the...

7.8CVSS5.8AI score0.00395EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/03/08 10:32 p.m.•32 views

CVE-2025-2043

A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown processing of the file /adminthemes of the component Add New Topic Handler. The manipulation of the argument Topic Key leads to deserialization. The attack may be initiated remotely...

7.2CVSS6.9AI score0.00496EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/06 10:15 p.m.•17 views

CVE-2025-2043

A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown processing of the file /adminthemes of the component Add New Topic Handler. The manipulation of the argument Topic Key leads to deserialization. The attack may be initiated remotely...

7.2CVSS5.5AI score0.00496EPSS
SaveExploits0References4
Rows per page
Query Builder