20083 matches found
Code-Projects Blood Bank Management System 注入漏洞
Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter memberid that can lead to SQL injection...
E-Commerce-Website-Using-PHP 注入漏洞
E-Commerce-Website-Using-PHP is a free and open source full-featured e-commerce website project. An injection vulnerability exists in E-Commerce-Website-Using-PHP version 1.0, which stems from the fact that incorrect manipulation of the parameter pcat can lead to SQL injection...
Code-Projects Blood Bank Management System 注入漏洞
Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter requesterid that can lead to SQL...
CVE-2025-27418
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionartipoatendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into t...
CVE-2025-27094
Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential information loss. The display time attribute for the date field, the size attribute...
CVE-2025-27419
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Denial of Service DoS vulnerability exists in WeGIA. This vulnerability allows any unauthenticated user to cause the server to become unresponsive by performing aggressive spidering. The vulnerabilit...
Linux kernel memory misreference vulnerability (CNVD-2025-04672)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a driver uninstallation without logging off the platform device, which can be exploited by an attacker to...
Peppermint 访问控制错误漏洞
Peppermint is an open source ticket management system from Peppermint Labs. A security vulnerability exists in Peppermint version 0.4.6 that stems from improper access control that allows a regular user to elevate privileges to administrator...
Apollo 访问控制错误漏洞
Apollo is a genome annotation editor in the Generic Model Organism Database open source. An access control error vulnerability exists in Apollo versions prior to 2.8.0 that stems from a lack of authentication and allows bypassing privilege checks...
Apollo 安全漏洞
Apollo is a genome annotation editor open-sourced by Generic Model Organism Database. A security vulnerability exists in Apollo versions prior to 2.8.0 that stems from the presence of a path information disclosure issue...
Code-Projects Blood Bank Management System 安全漏洞
Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. A security vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter name that can lead to cross-site...
Linux Distros Unpatched Vulnerability : CVE-2023-4235
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decodedeliverreport function during the SMS decoding...
Linux Distros Unpatched Vulnerability : CVE-2022-39324
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user can create a snapshot and arbitrarily...
CVE-2025-27156
Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing features do not sanitize the content of the HTML emails. A malicious user could use this issue to facilitate a phishing attempt or to indirectly exploit issues in the recipients mail...
CVE-2025-27401 In Tuleap, deleting a report can delete criteria filters in other reports
Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of Tuleap, the issue has a limited impact, it will mostly leave dangling data. However, a malicious user could create and delete reports multiple times to cycle through all the...
CVE-2025-22443 Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read...
Codezips Gym Management System 注入漏洞
Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from an incorrect operation of the parameter loginid that can lead to SQL injection...
Flowise 代码问题漏洞
Flowise is a FlowiseAI open source tool for easily building LLM applications. A security vulnerability exists in Flowise version 2.2.6 that stems from the presence of an arbitrary file upload issue...
Linux Distros Unpatched Vulnerability : CVE-2014-4167
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service...
novel 代码注入漏洞
novel is an open source novel system by xxyopen open source. A security vulnerability exists in novel 4.4.0 and earlier versions, which stems from vulnerability to remote code execution attacks...