3 matches found
CVE-2026-54518: Incorrect Authorization
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4, UnwrappedPropertyHandler.processUnwrappedCreatorProperties replays buffered JSON into creator parameters but never consults...
6.5CVSS5.9AI score0.00354EPSS
SaveExploits0References5
CVE-2024-25223
Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php...
9.9AI score0.00628EPSS
SaveExploits1References1
CVE-2024-25223: Improper Neutralization of Special Elements used in an SQL Command
Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php...
9.8CVSS5.8AI score0.00628EPSS
SaveExploits1References3
20