Lucene search
K

171 matches found

Vulnrichment
Vulnrichment
added 2025/11/17 4:2 p.m.4 views

CVE-2025-13289 1000projects Design & Development of Student Database Management System SubjectDetails.php sql injection

A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /TeacherLogin/Academics/SubjectDetails.php. The manipulation of the argument SubCode results in sql injection. The attack may be performed from...

6.5CVSS6.7AI score0.00031EPSS
Exploits1References4
CVE
CVE
added 2025/11/17 4:2 p.m.12 views

CVE-2025-13289

CVE-2025-13289 concerns 1000projects Design & Development of Student Database Management System 1.0. The vulnerability exists in an unknown function that processes SubCode in /TeacherLogin/Academics/SubjectDetails.php, where input manipulation enables SQL injection. Exploitation is possible remot...

8.8CVSS6.4AI score0.00031EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/11/07 6:57 p.m.3 views

CVE-2025-36008 IBM Db2 denial of service

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial of service due to improper allocation of resources...

6.5CVSS0.00075EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/07 6:40 p.m.1 views

CVE-2025-36185 IBM Db2 denial of service

IBM Db2 12.1.0 through 12.1.2 for Linux, UNIX and Windows includes Db2 Connect Server could allow a local user to cause a denial of service due to improper neutralization of special elements in data query logic...

6.2CVSS5.8AI score0.00031EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-29146

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00224EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-30697

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.0025EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-54994

Malicious code in bioql PyPI...

4.4CVSS6.6AI score0.00079EPSS
Exploits1References1
NVD
NVD
added 2025/09/15 3:15 a.m.1 views

CVE-2025-10452

Statistical Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents with high-level privileges...

9.8CVSS0.00224EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/15 2:47 a.m.1 views

CVE-2025-10452 Gotac|Statistical Database System - Missing Authentication

Statistical Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents with high-level privileges...

9.8CVSS6.8AI score0.00224EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/15 2:47 a.m.6 views

CVE-2025-10452 Gotac|Statistical Database System - Missing Authentication

Statistical Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents with high-level privileges...

9.8CVSS0.00224EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/15 12:0 a.m.3 views

PT-2025-37444

Name of the Vulnerable Software and Affected Versions: Gotac Statistical Database System affected versions not specified Description: The Gotac Statistical Database System has a Missing Authentication vulnerability. This allows unauthenticated remote attackers to read, modify, and delete database...

9.8CVSS6.5AI score0.00224EPSS
Exploits0References10
BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.1 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to uncontrolled memory distribution, allows a attacker to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted requests...

5.3CVSS5.5AI score0.00157EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.1 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to buffer overflow in the stack, allows a attacker to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted requests...

6.8CVSS5.8AI score0.00209EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/09 12:0 a.m.2 views

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect Servers lies in their uncontrolled memory distribution, which allows attackers to cause service interruptions.

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted requests...

5.3CVSS0.00157EPSS
Exploits0References2Affected Software2
CNNVD
CNNVD
added 2025/05/26 12:0 a.m.2 views

SourceCodester Client Database Management System 注入漏洞

SourceCodester Client Database Management System is SourceCodester open source a client database management system . An injection vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from SQL injection due to incorrect operation of the parameter...

9.8CVSS5.7AI score0.00193EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 8:39 p.m.2 views

CVE-2021-26595

In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by view the result of the api-aa, called automatically upon a connection. NOTE: This vulnerability only affects products th...

5.3CVSS6.1AI score0.00108EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:36 p.m.2 views

CVE-2021-39377

A SQL Injection vulnerability exists in openSIS 8.0 when MySQL MariaDB is being used as the application database. A malicious attacker can issue SQL commands to the MySQL MariaDB database through the index.php username parameter...

9.8CVSS7.3AI score0.05279EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/09 12:0 a.m.2 views

SourceCodester Client Database Management System 安全漏洞

SourceCodester Client Database Management System is a SourceCodester open source client database management system. A security vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from a misbehavior of the parameter uploadedfilecancelled in...

9.8CVSS6.9AI score0.00604EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/04/10 12:0 a.m.2 views

BlueCMS 安全漏洞

BlueCMS is a PHP and MySQL based Content Management System CMS by 6arshid Personal Developer. A security vulnerability exists in BlueCMS version 1.6, which stems from a problem with the id parameter and could lead to arbitrary file deletion...

4.3CVSS6.7AI score0.00165EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/04/10 12:0 a.m.2 views

Simple-User-Management-System-with-PHP-MySQL 安全漏洞

Simple-User-Management-System-with-PHP-MySQL is a simple user management system built with PHP and MySQL by the individual developer Nababur Rahaman. A security vulnerability exists in Simple-User-Management-System-with-PHP-MySQL version 1.0 that stems from a cross-site scripting attack...

6.1CVSS4.6AI score0.00304EPSS
Exploits1References4
Rows per page
Query Builder