Lucene search
+L

92 matches found

CNVD
CNVD
added 2025/05/22 12:0 a.m.5 views

Employee Record System getData.php File SQL Injection Vulnerability

Employee Record System is an employee record system. Employee Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter keywords in the file /dashboard/getData.php. An attacker can exploit this...

8.8CVSS8.3AI score0.00405EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.5 views

Code-Projects Employee Record System 注入漏洞

Code-Projects Employee Record System is a Code-Projects open source employee record system. Code-Projects Employee Record System version 1.0 has an injection vulnerability, the vulnerability stems from improper handling of the parameter keywords in the file /dashboard/getData.php, which may lead ...

8.8CVSS7AI score0.00405EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
added 2025/01/30 1:0 p.m.11 views

CVE-2025-0870

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The complexity of ...

6.3CVSS7.3AI score0.00531EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/01/30 12:0 a.m.7 views

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files from Axiomatic Systems. A security vulnerability exists in Bento4 1.6.0-641 and earlier versions, which stems from a heap buffer overflow in the AP4DataBuffer::GetData function...

6.3CVSS5.9AI score0.00531EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/01/30 12:0 a.m.8 views

PT-2025-4079

Name of the Vulnerable Software and Affected Versions Axiomatic Bento4 versions up to 1.6.0-641 Description The issue affects the function AP4 DataBuffer::GetData in the library Ap4DataBuffer.h, leading to a heap-based buffer overflow. This can be exploited remotely, with a rather high complexity...

6.3CVSS5.5AI score0.00531EPSS
SaveExploits1References11
NVD
NVD
added 2024/11/18 4:15 a.m.32 views

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

7.5CVSS0.00607EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/11/18 12:0 a.m.7 views

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

6.9AI score0.00607EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/18 12:0 a.m.64 views

CVE-2024-52920

CVE-2024-52920 affects Bitcoin Core prior to 0.20.0. The issue enables remote attackers to cause a denial of service by sending a malformed GETDATA message, resulting in an infinite loop and potential node crash. Affected product: Bitcoin Core (versions before 0.20.0). Root cause: handling of GET...

7.5CVSS6.7AI score0.00607EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.5 views

Bitcoin Core 安全漏洞

Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in Bitcoin Core versions prior to 0.20.0. A remote attacker exploiting this vulnerability could cause a denial of service infinite loop via a malformed GETDATA messa...

7.5CVSS6.5AI score0.00607EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/18 12:0 a.m.20 views

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

0.00607EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/25 12:0 a.m.7 views

PT-2024-32342 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned. Description: The issue is related to a possible out-of-bounds read in the ProtocolMiscHwConfigChangeAdapter::GetData function, located in protocolmiscadapter.cpp. This could lead to local...

5.5CVSS5.3AI score0.00076EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/01 12:0 a.m.12 views

PUB-A-331672131

In ProtocolMiscHwConfigChangeAdapter::GetData of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation...

5.5CVSS5AI score0.00076EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/07 11:15 p.m.24 views

CVE-2021-35001

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS3.2AI score0.00757EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/07 11:15 p.m.3 views

CVE-2021-35001

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS5.7AI score
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/07 10:54 p.m.35 views

CVE-2021-35001 BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

3.1CVSS3.6AI score0.00757EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/07 10:54 p.m.78 views

CVE-2021-35001

CVE-2021-35001 affects BMC Track-It! GetData endpoint. The root cause is missing authorization prior to accessing functionality, allowing remote disclosure of sensitive information (stored credentials) on affected installations. Exploitation requires authentication per descriptions, and no explic...

6.5CVSS3.4AI score0.00757EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/01/08 7:15 a.m.4 views

CVE-2024-0301

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS5.6AI score0.00706EPSS
SaveExploits1References3
Prion
Prion
added 2024/01/08 7:15 a.m.21 views

Sql injection

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS7.7AI score0.00706EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/08 6:31 a.m.3 views

CVE-2024-0301 fhs-opensource iparking PayTempOrderAction.java getData sql injection

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS7.6AI score0.00706EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:50 a.m.4 views

SUSE CVE-2011-3660

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors that...

10CVSS9.6AI score0.04428EPSS
SaveExploits0References8
Rows per page
Query Builder