CVE-2025-3570 JamesZBL/code-projects db-hospital-drug ContentController.java save cross site scripting

A vulnerability was found in JamesZBL/code-projects db-hospital-drug 1.0. It has been classified as problematic. This affects the function Save of the file ContentController.java. The manipulation of the argument content leads to cross site scripting. It is possible to initiate the attack remotel...

CVE-2025-3570 JamesZBL/code-projects db-hospital-drug ContentController.java save cross site scripting

A vulnerability was found in JamesZBL/code-projects db-hospital-drug 1.0. It has been classified as problematic. This affects the function Save of the file ContentController.java. The manipulation of the argument content leads to cross site scripting. It is possible to initiate the attack remotel...

CVE-2025-3569

A vulnerability was found in JamesZBL/code-projects db-hospital-drug 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ShiroConfig.java. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been...

CVE-2025-3569 JamesZBL/code-projects db-hospital-drug ShiroConfig.java improper authorization

A vulnerability was found in JamesZBL/code-projects db-hospital-drug 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ShiroConfig.java. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been...

CVE-2025-3569 JamesZBL/code-projects db-hospital-drug ShiroConfig.java improper authorization

A vulnerability was found in JamesZBL/code-projects db-hospital-drug 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ShiroConfig.java. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been...

CVE-2025-3569: Improper Authorization

A vulnerability was found in JamesZBL/code-projects db-hospital-drug 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ShiroConfig.java. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been...

db-hospital-drug 安全漏洞

db-hospital-drug is a hospital inventory management system by James Personal Developer. A security vulnerability exists in db-hospital-drug version 1.0, which stems from improper authorization in the file ShiroConfig.java...

PT-2025-16219

Name of the Vulnerable Software and Affected Versions: db-hospital-drug version 1.0 Description: A critical issue was found, affecting some unknown functionality of the file ShiroConfig.java, leading to improper authorization. The attack can be launched remotely. Recommendations: For version 1.0,...

PT-2025-16251 · Unknown · Db-Hospital-Drug

Name of the Vulnerable Software and Affected Versions: JamesZBL/code-projects db-hospital-drug version 1.0 Description: A vulnerability was found in the function Save of the file ContentController.java. The manipulation of the argument content leads to cross site scripting. It is possible to...

CVE-2025-3570: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in JamesZBL/code-projects db-hospital-drug 1.0. It has been classified as problematic. This affects the function Save of the file ContentController.java. The manipulation of the argument content leads to cross site scripting. It is possible to initiate the attack remotel...

SUSE CVE-2025-29088

In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3dbconfig in the C-language API can cause a denial of service application crash. An sznBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect...

ALPINE-CVE-2025-29088

In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3dbconfig in the C-language API can cause a denial of service application crash. An sznBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect...

PT-2025-20238 · Ао 'Сбертех' · Субд 'Platform V Pangolin Db'

Уязвимость системы управления базами данных Platform V Pangolin DB связана с конфликтом данных в BIO-структурах OpenSSL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, перезаписать критически важные данные, ограничить возможность установки SSL-соединений и осуществить...

SQLite -- application crash

[email protected] reports: In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3dbconfig in the C-language API can cause a denial of service application crash. An sznBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect...

MAL-2025-3183 Malicious code in domino-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06df477c314cdfcac7727b2f680533d598342abd96b25f9a19e23c8002223320 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-15301 · Jalios · Jalios Jplatform

Name of the Vulnerable Software and Affected Versions: Jalios JPlatform versions prior to 10.0.6 Description: The DB chooser functionality in Jalios JPlatform improperly neutralizes special elements used in an SQL command, allowing authenticated administrative users to trigger SQL Injection. A...

CVE-2025-0942: Improper Neutralization of Special Elements used in an SQL Command

The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated users to trigger SQL Injection. This issue affects JPlatform before 10.0.6 and a PatchPlugin release 10.0.6 was issued 2023-02-06...

CVE-2025-30788

Cross-Site Request Forgery CSRF vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows SQL Injection.This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through = 5.25.08...

CVE-2025-30788

Cross-Site Request Forgery CSRF vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows SQL Injection.This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through = 5.25.08...

CVE-2025-30787

Cross-Site Request Forgery CSRF vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows Stored XSS.This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through = 5.25.08...