CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

111 matches found

OSV•added 2024/04/18 10:15 p.m.•13 views

CVE-2024-30929

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php...

8CVSS6.1AI score0.00981EPSS

SaveExploits2References2

NVD•added 2024/04/18 10:15 p.m.•28 views

CVE-2024-30924

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component...

4.6CVSS7AI score0.00341EPSS

SaveExploits2References2

NVD•added 2024/04/18 10:15 p.m.•31 views

CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

6.3CVSS7AI score0.00551EPSS

SaveExploits2References2

NVD•added 2024/04/18 10:15 p.m.•30 views

CVE-2024-30925

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

6.5CVSS7AI score0.00567EPSS

SaveExploits2References2

NVD•added 2024/04/18 10:15 p.m.•24 views

CVE-2024-30926

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component...

4.6CVSS7AI score0.00511EPSS

SaveExploits2References2

NVD•added 2024/04/18 10:15 p.m.•29 views

CVE-2024-30928

SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc...

8.1CVSS8.3AI score0.00724EPSS

SaveExploits2References2

OSV•added 2024/04/18 10:15 p.m.•13 views

CVE-2024-30924

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component...

4.6CVSS6.2AI score0.00341EPSS

SaveExploits2References2

OSV•added 2024/04/18 10:15 p.m.•16 views

CVE-2024-30926

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component...

4.6CVSS6.2AI score0.00511EPSS

SaveExploits2References2

NVD•added 2024/04/18 10:15 p.m.•28 views

CVE-2024-30929

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php...

8CVSS7AI score0.00981EPSS

SaveExploits2References2

OSV•added 2024/04/18 10:15 p.m.•18 views

CVE-2024-30928

SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc...

8.1CVSS6.1AI score0.00724EPSS

SaveExploits2References2

OSV•added 2024/04/18 10:15 p.m.•14 views

CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

6.3CVSS6.2AI score0.00551EPSS

SaveExploits2References2

OSV•added 2024/04/18 9:15 p.m.•13 views

CVE-2024-30922

SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering...

9.8CVSS6.3AI score0.01429EPSS

SaveExploits2References2

NVD•added 2024/04/18 9:15 p.m.•35 views

CVE-2024-30922

SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering...

9.8CVSS8.3AI score0.01429EPSS

SaveExploits2References2

OSV•added 2024/04/18 9:15 p.m.•12 views

CVE-2024-30921

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the photo.php component...

5.4CVSS6.2AI score0.0062EPSS

SaveExploits2References2

NVD•added 2024/04/18 9:15 p.m.•23 views

CVE-2024-30921

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the photo.php component...

5.4CVSS7AI score0.0062EPSS

SaveExploits2References2

OSV•added 2024/04/18 9:15 p.m.•12 views

CVE-2024-30920

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component...

7.4CVSS6.1AI score0.01027EPSS

SaveExploits2References2

OSV•added 2024/04/18 9:15 p.m.•15 views

CVE-2024-30923

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...

9.8CVSS6.2AI score0.0137EPSS

SaveExploits2References2

NVD•added 2024/04/18 9:15 p.m.•31 views

CVE-2024-30923

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...

9.8CVSS8.3AI score0.0137EPSS

SaveExploits2References2

Rapid7 Vulnerability Database (full)•added 2024/04/18 12:00 a.m.•4 views

CVE-2024-30925: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component...

6.5CVSS6.5AI score0.00567EPSS

SaveExploits2References2

Rapid7 Vulnerability Database (full)•added 2024/04/18 12:00 a.m.•2 views

CVE-2024-30922: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering...

9.8CVSS6.6AI score0.01429EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by