Lucene search
K

81 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/16 2:32 a.m.1 views

CVE-2026-4209

A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function...

6.5CVSS6.3AI score0.00128EPSS
Exploits1References15Affected Software20
NVD
NVD
added 2026/02/23 10:16 a.m.2 views

CVE-2026-2983

A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/importusers.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of t...

9.8CVSS0.00073EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/02/23 9:32 a.m.3 views

CVE-2026-2983 SourceCodester Student Result Management System Bulk Import import_users.php access control

A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/importusers.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of t...

7.5CVSS7AI score0.00073EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/02/23 9:32 a.m.24 views

CVE-2026-2983 SourceCodester Student Result Management System Bulk Import import_users.php access control

A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/importusers.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of t...

7.5CVSS0.00073EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/02/23 9:32 a.m.2 views

CVE-2026-2983

A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/importusers.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of t...

7.5CVSS5.1AI score0.00073EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2026/02/23 12:0 a.m.4 views

SourceCodester Student Result Management System 访问控制错误漏洞

SourceCodester Student Result Management System is an open-source student grade management system developed by SourceCodester. Version 1.0 of the SourceCodester Student Result Management System has a vulnerability related to access control. This vulnerability stems from improper handling of...

9.8CVSS7.1AI score0.00073EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/12/23 1:18 p.m.1 views

CVE-2025-66736

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the current user's identity, which may allow regular users to import user data into the database, resulting in an authorization bypass...

7.1CVSS6.8AI score0.00038EPSS
Exploits1References1
OSV
OSV
added 2025/12/22 9:15 p.m.0 views

CVE-2025-66736

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the current user's identity, which may allow regular users to import user data into the database, resulting in an authorization bypass...

7.1CVSS5.8AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/22 12:0 a.m.1 views

CVE-2025-66736

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the current user's identity, which may allow regular users to import user data into the database, resulting in an authorization bypass...

6.4AI score0.00038EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.3 views

PT-2025-52688

Name of the Vulnerable Software and Affected Versions youlai-boot version 2.21.1 Description The software contains an authorization bypass due to incorrect access control. The importUsers function within the SysUserController.java component does not verify the permissions of the current user. Thi...

7.1CVSS6.6AI score0.00038EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-6330

Malware in sbrugna...

8.8CVSS8.8AI score0.00202EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-5834

Malware in sbrugna...

5.7CVSS5.8AI score0.00135EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-6329

Malware in sbrugna...

6.1CVSS6.7AI score0.0019EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-6327

Malware in sbrugna...

7.5CVSS7.6AI score0.00295EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-2267

Malware in sbrugna...

7.2CVSS7AI score0.00451EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-30249

Malicious code in bioql PyPI...

7.2CVSS6.4AI score0.00417EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-39892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of GitLab CE/EE since version 12.0, a lower privileged user can import users from projects that they don't have a maintainer role on and disclos...

4.3CVSS5.1AI score0.00297EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/08/10 6:14 p.m.4 views

CVE-2012-10043

A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...

9.3CVSS7.5AI score0.05578EPSS
Exploits0References1
CVE
CVE
added 2025/08/08 6:9 p.m.12 views

CVE-2012-10043

ActFax Server 4.32 is affected by a stack-based buffer overflow in the Import Users from File function. The root cause is improper validation of the length of tab-delimited fields in .exp files, causing unsafe usage of strcpy() during CSV parsing. An attacker can compromise the system by crafting...

9.3CVSS7.2AI score0.05578EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/08/08 6:9 p.m.5 views

CVE-2012-10043 ActFax 4.32 Client Importer Buffer Overflow

A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...

9.3CVSS7.5AI score0.05578EPSS
Exploits0References5
Rows per page
Query Builder