Lucene search
+L

95 matches found

NVD
NVD
•added 2026/07/03 7:16 a.m.•29 views

CVE-2026-4967

In IMS, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed...

7.5CVSS0.00706EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/03 5:52 a.m.•58 views

CVE-2026-4967

In IMS, this CVE-2026-4967 describes a possible out-of-bounds read caused by a missing bounds check, which could lead to remote denial of service without extra privileges. The NVD and CVE records confirm the issue and provide a CVSSv3.1 base score of 7.5 (HIGH) with network attack vector and no u...

7.5CVSS6AI score0.00706EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/03 12:00 a.m.•30 views

PT-2026-55502

Name of the Vulnerable Software and Affected Versions IMS affected versions not specified Description An out-of-bounds read occurs due to a missing bounds check. This flaw allows a remote attacker to cause a denial of service, which is a condition where the system becomes unavailable to its...

7.5CVSS6AI score0.00706EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/29 12:00 a.m.•0 views

CVE-2026-13551: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an unknown function of the file /editBaptism.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

7.5CVSS5.5AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/29 12:00 a.m.•1 views

CVE-2026-13550: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unknown function of the file /delbaptism.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been mad...

7.5CVSS5.6AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•0 views

CVE-2026-11515: Use of Hard-coded Password

A vulnerability has been found in SourceCodester Barangay Resident Profiling and Information Management System 1.0. The impacted element is an unknown function of the file passswordreset.php of the component Password Reset Handler. Such manipulation of the argument newpassword with the input...

6.9CVSS5.5AI score0.00276EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/06 1:42 a.m.•26 views

CVE-2025-71251

In IMS, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

7.5CVSS6AI score0.00305EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/05 12:00 a.m.•33 views

PT-2026-23427

Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability...

6.5CVSS5.9AI score0.00376EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/02/19 7:21 p.m.•16 views

CVE-2025-8308

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Key Software Solutions Inc. INFOREX- General Information Management System allows XSS Through HTTP Headers.This issue affects INFOREX- General Information Management System: from 2025 and...

6.3CVSS5.5AI score0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/18 1:40 p.m.•46 views

CVE-2025-8308 Reflected XSS in Key Software's INFOREX

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Key Software Solutions Inc. INFOREX- General Information Management System allows XSS Through HTTP Headers. This issue affects INFOREX- General Information Management System: from 2025 and...

6.3CVSS0.00158EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/18 12:00 a.m.•1 views

CVE-2025-8308: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Key Software Solutions Inc. INFOREX- General Information Management System allows XSS Through HTTP Headers. This issue affects INFOREX- General Information Management System: from 2025 and...

6.3CVSS5.8AI score0.00158EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2019-15589

Malware in sbrugna...

6.1CVSS5.3AI score0.00851EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-29129

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00415EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-58439

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00764EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-14328

Malicious code in bioql PyPI...

7.8CVSS5.6AI score0.00349EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/18 12:00 a.m.•3 views

CVE-2025-10673: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/class/index.php. This manipulation of the argument classId causes sql injection. The attack may be initiated remotely. The exploit has...

9.8CVSS5.6AI score0.00589EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/14 12:00 a.m.•0 views

CVE-2025-10405: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This manipulation of the argument baptid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

9.8CVSS5.6AI score0.00415EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/14 12:00 a.m.•25 views

PT-2025-37424

Name of the Vulnerable Software and Affected Versions: itsourcecode Baptism Information Management System version 1.0 Description: A vulnerability exists in itsourcecode Baptism Information Management System version 1.0. The issue is due to SQL injection resulting from the manipulation of the ID...

9.8CVSS7.3AI score0.00426EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/14 12:00 a.m.•0 views

CVE-2025-10404: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Baptism Information Management System 1.0. This impacts an unknown function of the file /rptbaptismal.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be...

9.8CVSS5.5AI score0.00426EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/09 12:00 a.m.•1 views

CVE-2025-10113: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Student Information Management System 1.0. This affects an unknown function of the file /admin/modules/room/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has...

9.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
Rows per page
Query Builder