Lucene search
K

88 matches found

NVD
NVD
added yesterday4 views

CVE-2026-12164

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission...

4.4CVSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/06/09 8:59 p.m.7 views

CVE-2026-11552

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file importusers.php. The manipulation of the argument rawpassword with...

6.9CVSS5.6AI score0.00286EPSS
Exploits0References1
NVD
NVD
added 2026/06/08 6:16 p.m.10 views

CVE-2026-11552

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file importusers.php. The manipulation of the argument rawpassword with...

6.9CVSS0.00286EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/06/08 5:0 p.m.6 views

CVE-2026-11552

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file importusers.php. The manipulation of the argument rawpassword with...

6.9CVSS5.2AI score0.00286EPSS
Exploits0References6Affected Software2
EUVD
EUVD
added 2026/06/08 5:0 p.m.9 views

EUVD-2026-35174

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file importusers.php. The manipulation of the argument rawpassword with...

6.9CVSS5.2AI score0.00286EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/06/08 5:0 p.m.39 views

CVE-2026-11552 SourceCodester Onlne Examination & Learning Management System import_users.php hard-coded password

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file importusers.php. The manipulation of the argument rawpassword with...

6.9CVSS0.00286EPSS
Exploits0References5
CVE
CVE
added 2026/06/08 5:0 p.m.17 views

CVE-2026-11552

The CVE-2026-11552 vulnerability affects SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. The issue concerns an unknown functionality in the file import_users.php, where manipulating the raw_password argument with t...

6.9CVSS5.2AI score0.00286EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/16 2:32 a.m.4 views

CVE-2026-4209

A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function...

6.5CVSS6.3AI score0.04088EPSS
Exploits1References15Affected Software20
NVD
NVD
added 2026/02/23 10:16 a.m.6 views

CVE-2026-2983

A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/importusers.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of t...

9.8CVSS0.00412EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/02/23 9:32 a.m.3 views

CVE-2026-2983

A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/importusers.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of t...

7.5CVSS5.1AI score0.00412EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/23 9:32 a.m.7 views

CVE-2026-2983 SourceCodester Student Result Management System Bulk Import import_users.php access control

A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/importusers.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of t...

7.5CVSS7AI score0.00412EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/02/23 9:32 a.m.29 views

CVE-2026-2983 SourceCodester Student Result Management System Bulk Import import_users.php access control

A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/importusers.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of t...

7.5CVSS0.00412EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/02/23 12:0 a.m.6 views

SourceCodester Student Result Management System 访问控制错误漏洞

SourceCodester Student Result Management System is an open-source student grade management system developed by SourceCodester. Version 1.0 of the SourceCodester Student Result Management System has a vulnerability related to access control. This vulnerability stems from improper handling of...

9.8CVSS7.1AI score0.00412EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/12/23 1:18 p.m.3 views

CVE-2025-66736

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the current user's identity, which may allow regular users to import user data into the database, resulting in an authorization bypass...

7.1CVSS6.8AI score0.00268EPSS
Exploits1References1
OSV
OSV
added 2025/12/22 9:15 p.m.2 views

CVE-2025-66736

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the current user's identity, which may allow regular users to import user data into the database, resulting in an authorization bypass...

7.1CVSS5.8AI score0.00268EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/12/22 12:0 a.m.2 views

CVE-2025-66736

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the current user's identity, which may allow regular users to import user data into the database, resulting in an authorization bypass...

6.4AI score0.00268EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.4 views

PT-2025-52688

Name of the Vulnerable Software and Affected Versions youlai-boot version 2.21.1 Description The software contains an authorization bypass due to incorrect access control. The importUsers function within the SysUserController.java component does not verify the permissions of the current user. Thi...

7.1CVSS6.6AI score0.00268EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-6327

Malware in sbrugna...

7.5CVSS7.6AI score0.0232EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-6330

Malware in sbrugna...

8.8CVSS8.8AI score0.00694EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-2267

Malware in sbrugna...

7.2CVSS7AI score0.01335EPSS
Exploits1References2
Rows per page
Query Builder