Lucene search
+L

1116 matches found

RedhatCVE
RedhatCVE
added 2025/11/19 12:11 a.m.19 views

CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

6.5CVSS7AI score0.00269EPSS
SaveExploits1References1
NVD
NVD
added 2025/11/18 5:16 p.m.17 views

CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

6.5CVSS0.00269EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/11/18 12:00 a.m.12 views

PT-2025-47367

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4 Description The software contains an Insecure Direct Object Reference IDOR issue within the appointment cancellation functionality. This allows potential unauthorized access and manipulation of...

6.5CVSS6.5AI score0.00269EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/18 12:00 a.m.14 views

Hospital Management System 安全漏洞

Hospital Management System is a hospital management software by Pon Aravind Boominathan Individual Developer. A security vulnerability exists in Hospital Management System version v4, which stems from an insecure direct object reference in the Appointment Cancellation feature that could lead to...

6.5CVSS6.6AI score0.00269EPSS
SaveExploits1References3
CVE
CVE
added 2025/11/18 12:00 a.m.24 views

CVE-2025-63513

CVE-2025-63513 affects kishan0725 Hospital Management System v4 with an Insecure Direct Object Reference (IDOR) in the appointment cancellation feature. The vulnerability allows unauthorized access to appointment-related operations without proper authorization checks, per Red Hat and CVE listings...

6.5CVSS6.6AI score0.00269EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2025/11/18 12:00 a.m.16 views

EUVD-2025-198032

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

6.5AI score0.00269EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/11/18 12:00 a.m.9 views

CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

6.6AI score0.00269EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/11/18 12:00 a.m.28 views

CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

0.00269EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/14 2:03 p.m.11 views

CVE-2025-13116

A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit h...

5.5CVSS5.4AI score0.00303EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2025/11/13 7:01 p.m.10 views

database/sql: Postgres Scan Race Condition

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

7CVSS6AI score0.00355EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/11/13 6:57 p.m.11 views

database/sql: Postgres Scan Race Condition

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

7CVSS6AI score0.00355EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/11/13 6:53 p.m.17 views

database/sql: Postgres Scan Race Condition

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

7CVSS6AI score0.00355EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/11/13 3:20 p.m.8 views

database/sql: Postgres Scan Race Condition

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

7CVSS6AI score0.00355EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/11/13 3:16 p.m.19 views

database/sql: Postgres Scan Race Condition

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

7CVSS6AI score0.00355EPSS
SaveExploits0References8
OSV
OSV
added 2025/11/13 2:32 p.m.8 views

CVE-2025-13117 macrozheng mall-swarm/mall cancelOrder improper authorization

A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorization. The attack can be initiated remotely. The...

5.3CVSS5.7AI score
SaveExploits0References8
EUVD
EUVD
added 2025/11/13 2:32 p.m.10 views

EUVD-2025-175324

A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorization. The attack can be initiated remotely. The exploit h...

5.5CVSS5.3AI score0.00303EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/13 2:02 p.m.26 views

CVE-2025-13116 macrozheng mall-swarm/mall cancelUserOrder improper authorization

A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit h...

5.5CVSS0.00303EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/13 12:00 a.m.11 views

mall-swarm 授权问题漏洞

mall-swarm is a microservice mall system. There is an authorization issue vulnerability in mall-swarm, which originates from the mishandling of the orderId parameter in the cancelOrder function in the file /order/cancelOrder, and no detailed vulnerability details are provided...

5.5CVSS6AI score0.00303EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:00 a.m.4 views

EulerOS 2.0 SP12 : golang (EulerOS-SA-2025-2358)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can...

7CVSS6.8AI score0.00524EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:00 a.m.4 views

EulerOS 2.0 SP10 : golang (EulerOS-SA-2025-2414)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath '', '.', a...

7CVSS6.8AI score0.00524EPSS
SaveExploits1References3
Rows per page
Query Builder