Lucene search
+L

2783 matches found

CNNVD
CNNVD
added 2024/11/26 12:00 a.m.9 views

CodeAstro Hospital Management System 安全漏洞

CodeAstro Hospital Management System is a hospital management system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Hospital Management System version 1.0 that stems from incorrect manipulation of the parameters vname, vadr, vnumber, vemail, vphone, and vdesc can lead to...

5.4CVSS4.4AI score0.00454EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/25 12:00 a.m.12 views

CodeAstro Hospital Management System 安全漏洞

CodeAstro Hospital Management System is a hospital management system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Hospital Management System version 1.0, which originates from an unrestricted file upload issue contained in the docdpic parameter of the...

8.8CVSS6.6AI score0.00597EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/11/25 12:00 a.m.7 views

PT-2024-17156 · Unknown · 1000 Projects Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Beauty Parlour Management System. This issue affects an unknown part of the file /admin/add-customer.php. The...

9.8CVSS7.9AI score0.00827EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/11/25 12:00 a.m.9 views

E-Commerce Site 注入漏洞

E-Commerce Site is an open source e-commerce site by Codezips. An injection vulnerability exists in E-Commerce Site version 1.0, which stems from an incorrect manipulation of the parameter keywords that can lead to sql injection...

9.8CVSS7.5AI score0.00863EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/11/25 12:00 a.m.6 views

1000 Projects Beauty Parlour Management System SQL注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty salon management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which originates from a SQL injection in the parameter name...

9.8CVSS7.9AI score0.00827EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/25 12:00 a.m.7 views

1000 Projects Bookstore Management System 安全漏洞

1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. A security vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which originates from the inclusion of a cross-site request forgery...

6.9CVSS4.9AI score0.00347EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/11/24 12:00 a.m.9 views

PT-2024-17154 · Unknown · 1000 Projects Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical vulnerability was found in the 1000 Projects Beauty Parlour Management System. The issue affects an unknown functionality of the file /admin/edit-services.php...

9.8CVSS8AI score0.00765EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2024/11/22 12:00 a.m.9 views

KIA Instrument Cluster KIA Seltos Software 安全漏洞

KIA Instrument Cluster KIA Seltos Software is an in-vehicle communication system from the Korean company KIA. A security vulnerability exists in KIA Instrument Cluster KIA Seltos Software version v1.0. An attacker exploiting this vulnerability could cause the program to suffer a denial of service...

5.3CVSS6.6AI score0.00204EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/11/21 12:00 a.m.11 views

PT-2024-17125 · Unknown · 1000 Projects Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical issue has been discovered, affecting the /admin/about-us.php file. The manipulation of the pagetitle argument leads to SQL injection. This issue can be exploit...

9.8CVSS7.9AI score0.00887EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/11/20 12:00 a.m.7 views

KASDA KW6512 安全漏洞

KASDA KW6512 is a wireless router from KASDA. A security vulnerability exists in the KASDA KW6512 version V1.0. A remote attacker can exploit this vulnerability to execute arbitrary operating system commands via the quick setup and page parameters passed to internet.cgi...

9.1CVSS7.5AI score0.00998EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/20 12:00 a.m.6 views

WordPress plugin Xpresslane Fast Checkout Plugin 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.8CVSS8.3AI score0.0054EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/20 12:00 a.m.29 views

Querydsl 安全漏洞

Querydsl is a framework from the Querydsl open source that supports building type-safe SQL-like queries for multiple backends. A security vulnerability exists in Querydsl version 5.1.0 that stems from allowing SQL or HQL injection in orderBy in JPAQuery...

7.5AI score0.00391EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2024/11/20 12:00 a.m.11 views

PT-2024-17024 · Unknown · Code4Berry Decoration Management System

Name of the Vulnerable Software and Affected Versions: Code4Berry Decoration Management System version 1.0 Description: A problematic issue was found in the Code4Berry Decoration Management System, affecting an unknown part of the file /decoration/admin/user permission.php of the component User...

5.3CVSS4.8AI score0.00302EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/11/20 12:00 a.m.8 views

PT-2024-17025 · Unknown · Code4Berry Decoration Management System

Name of the Vulnerable Software and Affected Versions: Code4Berry Decoration Management System version 1.0 Description: A critical issue has been discovered, affecting the file /decoration/admin/btndates report.php of the component Between Dates Reports. The manipulation of the fromdate and todat...

8.8CVSS7.1AI score0.004EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2024/11/19 2:31 p.m.8 views

WordPress Elementor Portfolio Builder plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Elementor Portfolio Builder versions = 1.0.0...

6.5CVSS6.1AI score0.00294EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2024/11/19 12:00 a.m.10 views

WordPress plugin RSV 360 View 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.2AI score0.00302EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/18 8:27 p.m.10 views

CVE-2024-52506 Graylog can leak other users' reports via concurrent PDF report rendering

Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messages. This functionality, as included i...

7.1CVSS6.7AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/11/18 12:00 a.m.32 views

PT-2024-35682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the handling of NONHEAD !delta1 lclusters in the erofs filesystem. The issue was reported by syzbot, which found a WARNI...

5.5CVSS5.5AI score0.00207EPSS
SaveExploits0
OSV
OSV
added 2024/11/15 4:15 p.m.19 views

CVE-2024-50652

A file upload vulnerability in javashop 1.0 allows attackers to upload arbitrary files by modifying the avatar function...

4.3CVSS5.9AI score0.00289EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/11/15 12:00 a.m.11 views

java_shop 安全漏洞

javashop is a Java-based mall website system designed and implemented by Tim Green, an individual developer. A security vulnerability exists in javashop version 1.0, which stems from incorrect access control. An attacker can exploit the vulnerability to obtain sensitive information about users wi...

6.5CVSS6.3AI score0.00497EPSS
SaveExploits1References2
Rows per page
Query Builder