612 matches found
PT-2023-17365 · Unknown · Sourcecodester Online Computer/Laptop Store
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the Product Search component, specifically affecting the file /?p=products. The search argument is vulnerable to sql injection, allowi...
Simple Guestbook Management System 跨站脚本漏洞
Simple Guestbook Management System is a guestbook management system. A security vulnerability exists in Simple Guestbook Management System version 1.0. An attacker could exploit this vulnerability to conduct a cross-site scripting attack...
Phpgurukul Park Ticketing Management System SQL注入漏洞
PHPGurukul Park Ticketing Management System is a park ticketing management system from PHPGurukul, Inc. A security vulnerability exists in version 1.0 of the Phpgurukul Park Ticketing Management System, which stems from a discovery containing a SQL injection attack via the User Name parameter...
Double Free
Overview Affected versions of this package are vulnerable to Double Free. The nnops.fractionalavgpoolv2 and nnops.fractionalmaxpoolv2 functions require the first and fourth elements of their parameter poolingratio to be equal to 1.0, as pooling on batch and channel dimensions is not supported. Po...
Osprey Pump Controller 命令注入漏洞
Osprey Pump Controller is a pump controller from Osprey. A security vulnerability exists in Osprey Pump Controller version 1.01 that stems from the presence of a command injection vulnerability. An attacker can exploit the vulnerability to gain access to the system...
CVE-2023-1541 Business Logic Errors in answerdev/answer
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-24729
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function...
CVE-2023-27214
Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php...
Health Center Patient Record Management System 跨站脚本漏洞
Health Center Patient Record Management System is a Health Center Patient Record Management System by Arvin Arandilla Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Health Center Patient Record Management System version 1.0, which stems from an issue with the...
PT-2023-16788 · Sourcecodester · Sourcecodester Health Center Patient Record Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Health Center Patient Record Management System. This issue affects the file admin/fecalysis...
libde265 代码问题漏洞
Libde265 is a German h.265 video codec. A security vulnerability exists in libde265 version v1.0.10, which stems from a NULL pointer dereference issue found in the ffhevcputhevcepelpixels8sse method of the sse-motion.cc file...
CVE-2023-23158
A stored cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter on the enquiry page...
IBM MQ 输入验证错误漏洞
IBM MQ IBM WebSphere MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable, validated messaging backbone for service-oriented architectures SOA. An input validation error vulnerability exists in IBM MQ for HPE NonStop version...
CVE-2023-24364
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel...
CVE-2022-31405
MV iDigital Clinic Enterprise iDCE 1.0 stores passwords in cleartext...
PT-2023-16606 · Sourcecodester · Sourcecodester Employee Task Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Task Management System version 1.0 Description: A critical issue affects the processing of the file task-details.php, where the manipulation of the task id argument leads to sql injection. The attack can be initiated...
Intern Record System SQL注入漏洞
Intern Record System is an intern record system from the individual developers at Codeprojects. A security vulnerability exists in Intern Record System version 1.0. An attacker can exploit this vulnerability to execute arbitrary code and obtain sensitive information...
SUSE CVE-2018-8292
An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0...