Lucene search
K

31106 matches found

RedhatCVE
RedhatCVE
added 2026/04/06 10:57 a.m.2 views

CVE-2026-5554

A security flaw has been discovered in code-projects Concert Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file /ConcertTicketReservationSystem-master/processsearch.php of the component Parameter Handler. Performing a manipulation of the argument...

7.5CVSS6.8AI score0.00043EPSS
Exploits0References1
OSV
OSV
added 2026/04/06 7:58 a.m.2 views

BIT-NODE-MIN-2026-21712

A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...

5.7CVSS6.7AI score0.00039EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.2 views

OpenAirInterface 安全漏洞

OpenAirInterface is a mobile communication network software platform developed by the French company OpenAirInterface. OpenAirInterface V2.2.0 contains a security vulnerability. This vulnerability arises from AMF crashing when receiving NGAP messages that contain invalid process codes or invalid...

7.5CVSS5.8AI score0.00091EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.4 views

SandboxJS 安全漏洞

SandboxJS is a security assessment tool developed by nyariv. Versions of SandboxJS prior to 0.8.36 contained a security vulnerability; this vulnerability stemmed from infinite recursion in the parser, which could lead to process crashes...

7.5CVSS5.8AI score0.00082EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.2 views

PT-2026-35850

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.138 Description A use after free issue exists in WebMIDI. This allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a specially...

10CVSS6AI score0.00212EPSS
Exploits0References40
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.3 views

PT-2026-30657

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.4.0 to before 3.4.9, a missing bounds check on the dataWindow attribute in EXR file headers allows an attacker to trigger a signed integer overfl...

8.7CVSS6AI score0.0009EPSS
Exploits8References12
EUVD
EUVD
added 2026/04/05 9:30 p.m.2 views

EUVD-2019-20058

Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...

6.9CVSS6.2AI score0.00017EPSS
Exploits0References4
NVD
NVD
added 2026/04/05 9:16 p.m.1 views

CVE-2019-25661

Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...

6.9CVSS0.00017EPSS
Exploits0References3
CVE
CVE
added 2026/04/05 8:45 p.m.4 views

CVE-2019-25661

Remote Process Explorer 1.0.0.16 is affected by a local buffer overflow in the Add Computer dialog. A crafted string pasted into the computer name textbox can crash the added computer by overwriting the SEH chain, causing denial of service. The issue is local, with low attack complexity and no pr...

6.9CVSS6.2AI score0.00017EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/05 8:45 p.m.18 views

CVE-2019-25661 Remote Process Explorer 1.0.0.16 Local Buffer Overflow DoS

Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...

6.9CVSS0.00017EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/05 8:45 p.m.1 views

CVE-2019-25661 Remote Process Explorer 1.0.0.16 Local Buffer Overflow DoS

Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...

6.9CVSS6.2AI score0.00017EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/05 8:45 p.m.0 views

CVE-2019-25661

Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...

6.9CVSS6.2AI score0.00017EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2026/04/05 12:30 p.m.1 views

EUVD-2026-19056

A security flaw has been discovered in code-projects Concert Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file /ConcertTicketReservationSystem-master/processsearch.php of the component Parameter Handler. Performing a manipulation of the argument...

7.5CVSS6.8AI score0.00043EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2026/04/05 10:55 a.m.3 views

CVE-2026-2826

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.3. This is due to the plugin not properly verifying that a user has the uploadfiles capability in the processpattern REST API endpoin...

4.3CVSS5.9AI score0.00011EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/05 10:55 a.m.2 views

CVE-2026-3445

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass in all versions up to, and including, 4.16.11. This is due to a missing ownership verification on...

7.1CVSS5.9AI score0.00011EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/05 9:0 a.m.1 views

CVE-2026-5554

A security flaw has been discovered in code-projects Concert Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file /ConcertTicketReservationSystem-master/processsearch.php of the component Parameter Handler. Performing a manipulation of the argument...

7.5CVSS5.7AI score0.00043EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/05 9:0 a.m.1 views

CVE-2026-5554 code-projects Concert Ticket Reservation System Parameter process_search.php sql injection

A security flaw has been discovered in code-projects Concert Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file /ConcertTicketReservationSystem-master/processsearch.php of the component Parameter Handler. Performing a manipulation of the argument...

7.5CVSS6.8AI score0.00043EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/05 9:0 a.m.26 views

CVE-2026-5554 code-projects Concert Ticket Reservation System Parameter process_search.php sql injection

A security flaw has been discovered in code-projects Concert Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file /ConcertTicketReservationSystem-master/processsearch.php of the component Parameter Handler. Performing a manipulation of the argument...

7.5CVSS0.00043EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.3 views

PT-2026-30470

Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...

6.9CVSS6.2AI score0.00017EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/05 12:0 a.m.5 views

Code-Projects Concert Ticket Reservation System SQL注入漏洞

The Code-Projects Concert Ticket Reservation System is an open-source system for booking concert tickets. Version 1.0 of the Code-Projects Concert Ticket Reservation System has a SQL injection vulnerability. This vulnerability stems from incorrect operations with the parameter searching in the fi...

7.5CVSS7.2AI score0.00043EPSS
Exploits0References5
Rows per page
Query Builder