Lucene search
+L

9 matches found

Vulnrichment
Vulnrichment
•added 2026/06/29 4:30 a.m.•27 views

CVE-2026-13535 CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection

A flaw has been found in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function GetFileInfo of the file hrsystem/application/models/Employeemodel.php of the component View Endpoint. Executing a manipulation of the argument ID can lead to sql injection. The attack...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/06/29 4:30 a.m.•19 views

CVE-2026-13535

A flaw has been found in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function GetFileInfo of the file hrsystem/application/models/Employeemodel.php of the component View Endpoint. Executing a manipulation of the argument ID can lead to sql injection. The attack...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2026/06/29 4:30 a.m.•30 views

EUVD-2026-40032

A flaw has been found in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function GetFileInfo of the file hrsystem/application/models/Employeemodel.php of the component View Endpoint. Executing a manipulation of the argument ID can lead to sql injection. The attack...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References6
Microsoft CVE
Microsoft CVE
•added 2026/04/23 8:07 a.m.•21 views

ksmbd: fix potencial OOB in get_file_all_info() for compound requests

...

8.8CVSS7.8AI score0.00717EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/04/22 12:00 a.m.•25 views

Linux Distros Unpatched Vulnerability : CVE-2026-31433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix potencial OOB in getfileallinfo for compound requests When a compound request consists of QUERYDIRECTORY + QUERYINFO FILEALLINFORMATION and the first...

8.8CVSS7.8AI score0.00717EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/23 2:25 p.m.•22 views

CVE-2025-71153 ksmbd: Fix memory leak in get_file_all_info()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in getfileallinfo In getfileallinfo, if vfsgetattr fails, the function returns immediately without freeing the allocated filename, leading to a memory leak. Fix this by freeing the filename before returning...

5.2AI score
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/01/23 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-71153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in getfileallinfo In getfileallinfo, if vfsgetattr fails, the functio...

5.5CVSS5.7AI score0.00133EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/20 12:32 a.m.•8 views

CVE-2026-1196 MineAdmin getFileInfoById information disclosure

A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity...

3.1CVSS4.6AI score0.00465EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•5 views

PT-2020-12243

Name of the Vulnerable Software and Affected Versions Triangle MicroWorks SCADA Data Gateway versions 2.41.0213 through 4.0.122 Triangle MicroWorks SCADA Data Gateway versions 3.02.0697 through 4.0.122 Description The issue allows remote attackers to cause a denial-of-service condition due to a...

7.5CVSS6.4AI score0.02568EPSS
SaveExploits0References5
Rows per page
Query Builder