Lucene search
+L

28 matches found

CVE
CVE
•added 2025/10/27 12:00 a.m.•33 views

CVE-2025-54965

The BAE SOCET GXP software (versions prior to 4.6.0.2 ) is vulnerable to a Cross-Site Scripting (XSS) issue within the Job Status Service . The root cause is the improper sanitization of the job ID parameter before it is used on the job status page. An attacker who successfully social engineers a...

6.1CVSS6.4AI score0.00202EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-32029

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00439EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/07/18 12:00 a.m.•20 views

Job Diary view-details.php file SQL Injection Vulnerability

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from an error in the parameter jobid in the file /view-details.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL...

9.8CVSS8.2AI score0.00481EPSS
SaveExploits1References1
OSV
OSV
•added 2024/09/05 1:15 p.m.•14 views

CVE-2024-8471

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through JOBID and USERNAME parameters in /jobportal/process.php...

6.1CVSS5.8AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/22 12:15 a.m.•13 views

CVE-2023-49689

Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'JobId' parameter of the Employer/DeleteJob.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00671EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/12/21 12:00 a.m.•15 views

Kashipara Job Portal SQL Injection Vulnerability

Kashipara Job Portal is an online job portal system from Kashipara. A SQL injection vulnerability exists in Kashipara Job Portal v1.0, which stems from the "JobId" parameter of Employer/DeleteJob.php does not validate received characters and is sent to the database unfiltered...

9.8CVSS8AI score0.00671EPSS
SaveExploits1References4
OSV
OSV
•added 2021/10/22 12:15 p.m.•18 views

CVE-2021-38481

The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the function. An attacker may send a malicious payload that can enable the user to execute another SQL expression by sending a specific string...

9.8CVSS5.9AI score0.01004EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/04/01 12:00 a.m.•17 views

Mainway FireEye EX SQL注入漏洞

Mainway FireEye EX is an all-in-one platform for enterprise security from Mainway, a China-based company. the FireEye® Central Management Platforms CM Series are a set of management platforms that consolidate the management, reporting, and data sharing of FireEye products into a single, easily...

6.5CVSS6.8AI score0.01316EPSS
SaveExploits1References2
Rows per page
Query Builder