Lucene search
+L

117 matches found

Vulnrichment
Vulnrichment
added 2026/02/26 11:27 a.m.8 views

CVE-2026-1198 SQL Injection in SIMPLE.ERP

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in [email protected]...

8.6CVSS5.8AI score0.00307EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/26 11:27 a.m.26 views

CVE-2026-1198

SIMPLE.ERP is affected by a SQL Injection in the search feature in the "Obroty na kontach" window. The issue arises from insufficient input validation, allowing an authenticated attacker to craft a query that could be executed by the database. The CVE entry notes a high impact (CVSS v4.0 base sco...

8.6CVSS5.8AI score0.00307EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/26 12:00 a.m.21 views

PT-2026-22138

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in [email protected] u06...

8.6CVSS5.8AI score0.00307EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/11/12 7:18 p.m.5 views

EUVD-2025-141789

Malicious code in goodan-ngasa-na npm...

6.6AI score
SaveExploits0
OSV
OSV
added 2025/11/12 7:18 p.m.5 views

MAL-2025-174506 Malicious code in goodan-ngasa-na (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ebfe7bbe4bc80b10be1af5c325f416efdd7043f5538c249977b217ea0970b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
EUVD
EUVD
added 2025/11/12 7:18 p.m.5 views

EUVD-2025-139475

Malicious code in nuilva-dakdre-na npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/12 7:18 p.m.5 views

EUVD-2025-141408

Malicious code in hunimi-satihu-na npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/12 6:09 p.m.6 views

EUVD-2025-144573

Malicious code in augis-pom9r-na npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/12 4:47 p.m.2 views

EUVD-2025-147789

Malicious code in tehah-na-buta npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 4:47 p.m.6 views

Malicious code in na-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd71b0c92a64c87ffb47dac0dd7ef1300e9a4bd457725536cd386e9c23a9e73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-9308

Malware in sbrugna...

7.5CVSS7.5AI score0.01978EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-3247

Malware in sbrugna...

9.8CVSS9.3AI score0.53095EPSS
SaveExploits0References5
Snyk
Snyk
added 2025/09/16 5:28 a.m.0 views

Malicious Package

Overview zarabotok-na-obmenakh-bitkoinakh-d7rqlq46s is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/16 5:28 a.m.6 views

Malicious code in zarabotok-na-kriptovaliute-dlia-nachinaiushchikh-forum-5vff29khr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aedf613f47b3557e94c05e4616c8964f6d4cd5fa415f68cf8695fe4bb8f999bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/09/08 4:09 p.m.1 views

SUSE-SU-2025:03096-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2023-45229: Fixed integer underflow when processing IANA/IATA options in a DHCPv6 Advertise message bsc1218879 - CVE-2023-45230: Fixed buffer overflow in the DHCPv6 client via a long Server ID option bsc1218880...

8.8CVSS7.4AI score0.01223EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.10 views

PT-2025-34336 · Undefined · Undefined

CVE-2025-57745 - Cisco Router Unvalidated Input CVE ID : CVE-2025-57745 Published : Aug. 20, 2025, 4:16 a.m. | 3 hours, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.3AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:12 a.m.10 views

CVE-2018-17555

The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter...

7.5CVSS6.7AI score0.01978EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2025/03/25 8:15 a.m.9 views

CVE-2025-2751

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na...

8.8CVSS7.3AI score0.0064EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/03/25 12:00 a.m.11 views

Open Asset Import Library(assimp) 缓冲区错误漏洞

Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A buffer error vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from the fact that incorrect manipulation of the parameter na can lead to out-of-bounds reads...

8.8CVSS4.9AI score0.0064EPSS
SaveExploits1References7
Openbugbounty
Openbugbounty
added 2024/04/15 8:20 a.m.13 views

russkiy-na-5.ru Cross Site Scripting vulnerability OBB-3918154

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rows per page
Query Builder