Lucene search
+L

551 matches found

Cvelist
Cvelist
•added 2026/03/06 12:19 p.m.•41 views

CVE-2018-25173 Rmedia SMS 1.0 SQL Injection via editgrp.php

Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter. Attackers can send GET requests to editgrp.php with malicious gid values using EXTRACTVALUE and CONCAT functions to retriev...

8.8CVSS0.00237EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/06 12:19 p.m.•7 views

CVE-2018-25173

Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter. Attackers can send GET requests to editgrp.php with malicious gid values using EXTRACTVALUE and CONCAT functions to retriev...

8.8CVSS5.9AI score0.00237EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/06 12:19 p.m.•8 views

CVE-2018-25173 Rmedia SMS 1.0 SQL Injection via editgrp.php

Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter. Attackers can send GET requests to editgrp.php with malicious gid values using EXTRACTVALUE and CONCAT functions to retriev...

8.8CVSS5.9AI score0.00237EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/06 12:00 a.m.•1 views

CVE-2018-25173: Improper Neutralization of Special Elements used in an SQL Command

Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter. Attackers can send GET requests to editgrp.php with malicious gid values using EXTRACTVALUE and CONCAT functions to retriev...

8.8CVSS5.9AI score0.00237EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/06 12:00 a.m.•25 views

PT-2026-23685

Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter. Attackers can send GET requests to editgrp.php with malicious gid values using EXTRACTVALUE and CONCAT functions to retriev...

8.8CVSS5.9AI score0.00237EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/06 12:00 a.m.•17 views

Rmedia SMS SQL注入漏洞

Rmedia SMS is a SMS gateway system developed by Ananditwiz. Version 1.0 of Rmedia SMS has a SQL injection vulnerability. This vulnerability stems from the gid parameter in the editgrp.php file, which allows for SQL injections, potentially leading to the extraction of database schemas and sensitiv...

8.8CVSS5.9AI score0.00237EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/03/05 12:00 a.m.•5 views

Unity Linux 20.1060e Security Update: containerd (UTSA-2026-005830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005830 advisory. containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set a...

7.8CVSS5.8AI score0.00294EPSS
SaveExploits1References4
Fedora
Fedora
•added 2026/02/26 1:11 a.m.•19 views

[SECURITY] Fedora 43 Update: munge-0.5.18-1.fc43

MUNGE MUNGE Uid 'N' Gid Emporium is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having...

7.8CVSS6AI score0.00274EPSS
SaveExploits0
Fedora
Fedora
•added 2026/02/26 12:56 a.m.•19 views

[SECURITY] Fedora 42 Update: munge-0.5.18-1.fc42

MUNGE MUNGE Uid 'N' Gid Emporium is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having...

7.8CVSS6AI score0.00274EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•13 views

Azure Linux 3.0 Security Update: samba (CVE-2021-20254)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-20254 advisory. - A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group...

6.8CVSS5.3AI score0.01616EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/15 4:26 a.m.•15 views

CVE-2025-71084

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancelworksync will prevent the work from running which also prevents destroying the...

5.8AI score0.00134EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•10 views

EulerOS 2.0 SP12 : proftpd (EulerOS-SA-2026-1077)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental...

7.3AI score0.02158EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•9 views

EulerOS 2.0 SP12 : proftpd (EulerOS-SA-2026-1097)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental...

7.3AI score0.02158EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/14 12:25 a.m.•13 views

SUSE CVE-2025-71084

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancelworksync will prevent the work from running which also prevents destroying the...

2.5CVSS6.4AI score0.00134EPSS
SaveExploits0References20
OpenVAS
OpenVAS
•added 2026/01/14 12:00 a.m.•8 views

Huawei EulerOS: Security Advisory for proftpd (EulerOS-SA-2026-1056)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7AI score0.02158EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•10 views

MiracleLinux 3 : nss_ldap-253-12AXS3 (AXSA:2008-381:03)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2008-381:03 advisory. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows applications to retrieve information about users an...

4.3CVSS5.6AI score0.01164EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2026/01/14 12:00 a.m.•8 views

Huawei EulerOS: Security Advisory for proftpd (EulerOS-SA-2026-1035)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7AI score0.02158EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/13 4:16 p.m.•13 views

CVE-2025-71084

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancelworksync will prevent the work from running which also prevents destroying the...

5.5CVSS0.00134EPSS
SaveExploits0References7
OSV
OSV
•added 2026/01/13 4:16 p.m.•13 views

UBUNTU-CVE-2025-71084

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancelworksync will prevent the work from running which also prevents destroying the...

5.5CVSS5.7AI score0.00134EPSS
SaveExploits0References38
UbuntuCve
UbuntuCve
•added 2026/01/13 4:16 p.m.•11 views

CVE-2025-71084

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancelworksync will prevent the work from running which also prevents destroying the...

5.5CVSS5.7AI score0.00134EPSS
SaveExploits0References37
Rows per page
Query Builder