Lucene search
+L

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-10982

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.00269EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 8:57 a.m.6 views

CVE-2024-6438

A vulnerability has been found in Hitout Carsale 1.0 and classified as critical. This vulnerability affects unknown code of the file OrderController.java. The manipulation of the argument orderBy leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

6.5CVSS7.9AI score0.00358EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/17 3:6 a.m.15 views

CVE-2025-28198

A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...

5.9CVSS7.4AI score0.00269EPSS
Exploits1References1
NVD
NVD
added 2025/04/15 4:16 p.m.21 views

CVE-2025-28198

A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...

5.9CVSS0.00269EPSS
Exploits1References1
CVE
CVE
added 2025/04/15 12:0 a.m.62 views

CVE-2025-28198

Hitout car sale 1.0 is affected by a SQL injection in the StoreController.java component, exploitable via the orderBy parameter. This issue can lead to disclosure of sensitive information. Documented details consistently identify the affected software/version and the vulnerable parameter/file but...

5.9CVSS7AI score0.00269EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/15 12:0 a.m.9 views

CVE-2025-28198

A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...

7.6AI score0.00269EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/04/15 12:0 a.m.18 views

CVE-2025-28198

A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...

0.00269EPSS
Exploits1References1
OSV
OSV
added 2025/04/15 12:0 a.m.6 views

CVE-2025-28198

A SQL injection vulnerability in Hitout car sale 1.0 allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component...

5.9CVSS7.3AI score0.00269EPSS
Exploits1References3
Rows per page
Query Builder