CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

469 matches found

ATTACKERKB•added 2025/10/08 5:02 a.m.•5 views

CVE-2025-11433

A security flaw has been discovered in itsourcecode Leave Management System 1.0. This impacts the function redirect of the file /module/employee/controller.php?action=reset of the component Query Parameter Handler. Performing a manipulation of the argument ID results in cross site scripting. It i...

6.1CVSS4AI score0.00264EPSS

SaveExploits1References5Affected Software1

NVD•added 2025/10/08 1:15 a.m.•12 views

CVE-2025-11420

A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/editorderdetails.php. The manipulation of the argument orderid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

9.8CVSS0.00384EPSS

SaveExploits1References5

NVD•added 2025/10/07 8:15 a.m.•16 views

CVE-2025-11358

A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /removeuser.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and...

8.8CVSS0.00306EPSS

SaveExploits1References5

EUVD•added 2025/10/07 12:30 a.m.•12 views

EUVD-2002-1103

Malware in sbrugna...

5CVSS6.3AI score0.0158EPSS

SaveExploits0References7

CNNVD•added 2025/10/07 12:00 a.m.•8 views

BBMRI-ERIC Negotiator 安全漏洞

BBMRI-ERIC Negotiator is a biospecimen repository access tool from the Austrian company BBMRI-ERIC. A security vulnerability exists in BBMRI-ERIC Negotiator version v3.15.2, which stems from improper manipulation of the userID parameter and could lead to an insecure direct object reference attack...

5.3CVSS6.5AI score0.00246EPSS

SaveExploits0References1

EUVD•added 2025/10/06 5:02 a.m.•9 views

EUVD-2025-32489

A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation of the argument subjectId results in authorization bypass. Th...

5.3CVSS6.3AI score0.00326EPSS

SaveExploits0References6

EUVD•added 2025/10/03 8:07 p.m.•7 views

EUVD-2025-26467