Lucene search
+L

7423 matches found

Vulnrichment
Vulnrichment
•added 2024/03/12 12:00 a.m.•25 views

CVE-2024-24101

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...

8.3AI score0.0031EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/12 12:00 a.m.•82 views

CVE-2024-24093

The Code-projects Scholars Tracking System version 1.0 is vulnerable to a SQL Injection flaw. An attacker can send specially crafted SQL statements via the Personal Information Update information/messages, potentially leading to unauthorized access and data manipulation or allowing the execution ...

9.8CVSS8.3AI score0.00569EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/12 12:00 a.m.•34 views

CVE-2024-24093

SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...

8.2AI score0.00569EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/12 12:00 a.m.•9 views

CVE-2024-24093: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...

9.8CVSS6.1AI score0.00569EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/12 12:00 a.m.•6 views

CVE-2023-42308: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section...

6.1CVSS6.2AI score0.00345EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/03/12 12:00 a.m.•57 views

CVE-2023-42308

Cross Site Scripting XSS vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section...

6.1AI score0.00345EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/12 12:00 a.m.•50 views

CVE-2024-24101

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...

7.9AI score0.0031EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/12 12:00 a.m.•22 views

CVE-2024-24097

Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...

6.3AI score0.00323EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/12 12:00 a.m.•7 views

CVE-2024-24097: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...

5.4CVSS6.2AI score0.00323EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/12 12:00 a.m.•6 views

PT-2024-13036

Name of the Vulnerable Software and Affected Versions Code-Projects Exam Form Submission version 1.0 Description A Cross Site Scripting XSS issue affects the software, allowing attackers to execute arbitrary code through the Subject Name and Subject Code sections. This enables attackers to run...

6.1CVSS0.00413EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/03/12 12:00 a.m.•37 views

CVE-2023-42307

Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...

6.1AI score0.00413EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/03/12 12:00 a.m.•8 views

PT-2024-20272

Name of the Vulnerable Software and Affected Versions Code-projects Scholars Tracking System version 1.0 Description The issue concerns SQL Injection under the Eligibility Information Update feature. This allows for potential manipulation of database queries, which could lead to unauthorized data...

9.8CVSS0.0031EPSS
SaveExploits0References4
Veracode
Veracode
•added 2024/03/10 12:44 a.m.•28 views

Improper Access Control

GitLab is vulnerable to Improper Access Control. The vulnerability is due to improper authorization in GitLab. Group members with sub-maintainer roles were able to change the title of privately accessible deploy keys associated with projects in the group, which they should not have permission to...

5.4CVSS6.8AI score0.00325EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
•added 2024/03/08 12:00 a.m.•21 views

Fedora: Security Advisory for maven-remote-resources-plugin (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02352EPSS
SaveExploits3References2
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•34 views

[SECURITY] Fedora 40 Update: modulemaker-maven-plugin-1.11-1.fc40

This plugin allows the creation of a module-info.class for projects on Java 6 to Java 8 where a module-info.java file cannot be compiled...

8.8CVSS9AI score0.02352EPSS
SaveExploits3
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•28 views

[SECURITY] Fedora 40 Update: libbase-1.1.3-42.fc40

LibBase is a library developed to provide base services like logging, configuration and initialization to other libraries and applications. The library is the root library for all Pentaho-Reporting projects...

8.8CVSS6.9AI score0.02352EPSS
SaveExploits3
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•32 views

[SECURITY] Fedora 40 Update: jdeparser-2.0.3-17.fc40

This project is a fork of Sun's now Oracle's com.sun.codemodel project. We decided to fork the project because by all evidence, the upstream project is dead and not actively accepting outside contribution. All JBoss projects are urged to use this project instead for source code generation...

8.8CVSS7AI score0.02352EPSS
SaveExploits3
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•33 views

[SECURITY] Fedora 40 Update: jaxb-istack-commons-4.2.0-8.fc40

Code shared between JAXP, JAXB, SAAJ, and JAX-WS projects...

8.8CVSS7AI score0.02352EPSS
SaveExploits3
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•26 views

[SECURITY] Fedora 40 Update: fusesource-pom-1.12-18.fc40

This is a shared POM parent for FuseSource Maven projects...

8.8CVSS6.9AI score0.02352EPSS
SaveExploits3
Fedora
Fedora
•added 2024/03/07 10:32 p.m.•36 views

[SECURITY] Fedora 40 Update: auto-1.6.1-10.fc40

The Auto sub-projects are a collection of code generators that automate those types of tasks...

8.8CVSS7AI score0.02352EPSS
SaveExploits3
Rows per page
Query Builder