Lucene search
+L

41 matches found

NVD
NVD
•added 2026/09/23 2:17 p.m.•13 views

CVE-2026-86679

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

7.1CVSS0.00775EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/23 1:29 p.m.•39 views

CVE-2026-86679 Broken Access Control vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

7.1CVSS0.00775EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/23 1:29 p.m.•12 views

EUVD-2026-85293

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

7.1CVSS5.8AI score0.00775EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 1:29 p.m.•18 views

CVE-2026-86679

ZohoCorp ManageEngine Applications Manager (versions 182000 and below ) is susceptible to a permissions validation issue . This vulnerability allows a low-privileged user to delete service monitors that are outside of their assigned scope. The documents do not provide specific details regarding t...

7.1CVSS5.8AI score0.00775EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•2 views

PT-2026-97318

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

7.1CVSS5.8AI score0.00775EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•8 views

CVE-2026-86679: Improper Input Validation

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

7.1CVSS5.8AI score0.00775EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/04 1:57 a.m.•11 views

CVE-2026-26885

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=deleteservice...

2.7CVSS6AI score0.00337EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/03 5:16 p.m.•27 views

CVE-2026-26885

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=deleteservice...

2.7CVSS0.00337EPSS
SaveExploits1References1
OSV
OSV
•added 2026/03/03 5:16 p.m.•12 views

CVE-2026-26885

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=deleteservice...

2.7CVSS5.9AI score0.00337EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/03 12:00 a.m.•5 views

CVE-2026-26885

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=deleteservice...

2.7CVSS6AI score0.00337EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/03/03 12:00 a.m.•7 views

CVE-2026-26885

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=deleteservice...

6AI score0.00337EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/03 12:00 a.m.•17 views

EUVD-2026-9300

Sourcecodester Simple Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=deleteservice...

2.7CVSS6AI score0.00337EPSS
SaveExploits1References1
CVE
CVE
•added 2026/03/03 12:00 a.m.•35 views

CVE-2026-26885

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection within the /classes/Master.php?f=delete_service endpoint. The root cause involves the improper neutralization of special elements used in an SQL command. While the vulnerability has been identified across mult...

2.7CVSS6AI score0.00337EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2026/03/03 12:00 a.m.•42 views

CVE-2026-26885

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=deleteservice...

0.00337EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/03 12:00 a.m.•22 views

PT-2026-22753

Sourcecodester Simple Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=delete service...

6AI score0.00337EPSS
SaveExploits1References2
NVD
NVD
•added 2026/02/24 12:16 a.m.•24 views

CVE-2025-69250

free5gc UDM provides Unified Data Management UDM for free5GC, an open-source project for 5th generation 5G mobile core networks. In versions up to and including 1.4.1, the service reliably leaks detailed internal error messages e.g., strconv.ParseInt parsing errors to remote clients when processi...

8.7CVSS0.00414EPSS
SaveExploits1References4
CVE
CVE
•added 2026/02/23 11:45 p.m.•36 views

CVE-2025-69250

In free5GC, the UDM component (Nudm_UECM DELETE service) is affected up to version 1.4.1. The issue is improper error handling that leaks detailed internal error messages (e.g., strconv.ParseInt parsing errors) to remote clients when processing invalid pduSessionId inputs, exposing implementation...

8.7CVSS5.5AI score0.00414EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/23 12:00 a.m.•44 views

PT-2026-21578

Name of the Vulnerable Software and Affected Versions free5gc UDM versions up to and including 1.4.1 Description The UDM component of free5gc, used for Unified Data Management in 5G mobile core networks, discloses detailed internal error messages to remote clients when processing invalid...

8.7CVSS5.9AI score0.00414EPSS
SaveExploits1References14
CNNVD
CNNVD
•added 2023/05/17 12:00 a.m.•15 views

Online Exam System SQL注入漏洞

Online Exam System is an online exam system. Online Exam System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameters columns, data of /classes/Master.php?f=deleteservice/kelasdosen/data for external input SQL statements. An attacker can...

8.8CVSS8.1AI score0.00734EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/05/17 12:00 a.m.•11 views

PT-2023-21295 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A critical issue has been found in the system, affecting the file /classes/Master.php?f=delete service. The manipulation of the id argument leads to SQL injection,...

8.8CVSS6.9AI score0.00734EPSS
SaveExploits1References5
Rows per page
Query Builder