Lucene search
K

11437 matches found

Vulnrichment
Vulnrichment
added 2026/03/08 1:32 p.m.3 views

CVE-2026-3737 SourceCodester Pet Grooming Management Software User Creation add_user.php improper authorization

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file adduser.php of the component User Creation Handler. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

6.5CVSS5.5AI score0.00254EPSS
Exploits1References5
EUVD
EUVD
added 2026/03/08 12:30 p.m.5 views

EUVD-2026-10232

A vulnerability was identified in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the argument username/opttype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and...

9CVSS8AI score0.00632EPSS
Exploits1References6
NVD
NVD
added 2026/03/08 11:15 a.m.9 views

CVE-2026-3729

A vulnerability was identified in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the argument username/opttype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and...

9CVSS0.00632EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/08 10:32 a.m.22 views

CVE-2026-3729 Tenda F453 PPTPDClient fromPptpUserAdd stack-based overflow

A vulnerability was identified in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the argument username/opttype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and...

9CVSS0.00632EPSS
Exploits1References5
EUVD
EUVD
added 2026/03/08 6:31 a.m.6 views

EUVD-2026-10217

A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitati...

5.8CVSS5.7AI score0.00271EPSS
Exploits1References7
NVD
NVD
added 2026/03/08 6:16 a.m.4 views

CVE-2026-3710

A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitati...

7.2CVSS0.00271EPSS
Exploits1References6
OSV
OSV
added 2026/03/08 6:16 a.m.2 views

CVE-2026-3710

A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitati...

7.2CVSS5.7AI score
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/03/08 5:32 a.m.2 views

CVE-2026-3710

A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitati...

5.8CVSS5.7AI score0.00271EPSS
Exploits1References6Affected Software1
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.5 views

SourceCodester Sales and Inventory System SQL注入漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from incorrect handling of the cost...

8.8CVSS6.7AI score0.00301EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.5 views

Code-Projects Simple Flight Ticket Booking System SQL注入漏洞

Code-Projects Simple Flight Ticket Booking System is a simple airline ticket booking system developed by Code-Projects. Version 1.0 of the Code-Projects Simple Flight Ticket Booking System has a SQL injection vulnerability. This vulnerability arises from incorrect operations with parameters such ...

7.2CVSS5.9AI score0.00271EPSS
Exploits1References7
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.4 views

SourceCodester Sales and Inventory System SQL注入漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Versions of the SourceCodester Sales and Inventory System prior to version 1.0 contained a SQL injection vulnerability. This vulnerability stemmed from incorrect...

8.8CVSS6.7AI score0.00301EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.6 views

PT-2026-23942

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0 Description An improper authorization issue exists in the User Creation Handler component of the software. This can be triggered by manipulating the file add user.php. The attack can ...

6.5CVSS6.4AI score0.00254EPSS
Exploits1References13
Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.9 views

PT-2026-23953

Name of the Vulnerable Software and Affected Versions itsourcecode University Management System version 1.0 Description A SQL injection issue exists in itsourcecode University Management System 1.0. The issue is located in the /add result.php file. Manipulation of the subject argument can lead to...

9.8CVSS7.1AI score0.00342EPSS
Exploits1References13
Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.4 views

PT-2026-23919

A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitati...

5.8CVSS5.7AI score0.00271EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2026/03/06 7:52 a.m.6 views

CVE-2026-2899

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.1.17. This is due to the deleteFile method in the Uploader class lacking nonce verification and capability checks. The AJAX action is registered via...

6.5CVSS5.9AI score0.00223EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/06 12:31 a.m.6 views

EUVD-2026-9938

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function adddatasegment of the file src/ettercap/utils/etterfilter/efoutput.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this...

4.8CVSS5.4AI score0.00161EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2026/03/05 11:40 p.m.7 views

CVE-2026-3606

A flaw was found in Ettercap. A local user can exploit an out-of-bounds read vulnerability within the adddatasegment function of the etterfilter component. By manipulating input, an attacker can trigger this flaw, potentially leading to a denial of service...

5.5CVSS5.8AI score0.00161EPSS
Exploits1References9
NVD
NVD
added 2026/03/05 10:16 p.m.10 views

CVE-2026-3606

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function adddatasegment of the file src/ettercap/utils/etterfilter/efoutput.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this...

5.5CVSS0.00161EPSS
Exploits1References6
OSV
OSV
added 2026/03/05 10:16 p.m.3 views

DEBIAN-CVE-2026-3606

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function adddatasegment of the file src/ettercap/utils/etterfilter/efoutput.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this...

5.5CVSS3.9AI score0.00161EPSS
Exploits1References1
OSV
OSV
added 2026/03/05 10:16 p.m.3 views

CVE-2026-3606

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function adddatasegment of the file src/ettercap/utils/etterfilter/efoutput.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this...

5.5CVSS5.2AI score
Exploits0References6
Rows per page
Query Builder