Lucene search
+L

6374 matches found

Snyk
Snyk
added 2026/04/30 8:55 p.m.8 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks in the RegisterTemplates process. An attacker can access sensitive environment variables and configuration data by sending unauthenticated GET requests to the affected API...

8.7CVSS5.8AI score0.01051EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/30 8:55 p.m.7 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks in the RegisterTemplates process. An attacker can access sensitive environment variables and configuration data by sending unauthenticated GET requests to the affected API...

8.7CVSS5.8AI score0.01051EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/29 7:24 p.m.43 views

CVE-2018-25307 SysGauge Pro 4.6.12 Local Buffer Overflow SEH

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute...

8.6CVSS0.0015EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/29 7:24 p.m.11 views

EUVD-2018-21828

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute...

8.6CVSS6.2AI score0.0015EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/29 7:24 p.m.16 views

CVE-2018-25302

CVE-2018-25302 affects Allok AVI to DVD SVCD VCD Converter 4.0.1217. The vulnerability is an SEH-based buffer overflow in the License Name field that enables local code execution. An attacker can craft a payload consisting of junk data, NSEH bypass, an SEH handler address, and shellcode, paste it...

8.5CVSS6.3AI score0.00157EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/29 7:15 p.m.10 views

EUVD-2026-26282

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=register of the component Registration. The manipulation of the argument studentid/fullname/section/username results ...

5.3CVSS3.6AI score0.0032EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/29 7:15 p.m.15 views

CVE-2026-7401

CVE-2026-7401 affects SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The vulnerability targets the Registration component, specifically /index.php?action=register, where manipulation of the arguments student_id, full_name, section, or username enables cross-site scr...

5.3CVSS3.7AI score0.0032EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.9 views

PT-2026-35990

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute...

8.6CVSS6.2AI score0.0015EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/04/29 12:0 a.m.15 views

SourceCodester CET Automated Grading System with AI Predictive Analytics 跨站脚本漏洞

SourceCodester CET Automated Grading System with AI Predictive Analytics is an open-source English language assessment system based on artificial intelligence predictive analytics, developed by SourceCodester. Version 1.0 of the SourceCodester CET Automated Grading System with AI Predictive...

5.3CVSS5.6AI score0.0032EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/28 12:0 a.m.32 views

EUVD-2026-26141

A reflected Cross-Site Scripting XSS vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php...

5.7AI score0.0037EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.12 views

PT-2026-35819

A reflected Cross-Site Scripting XSS vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php...

5.7AI score0.0037EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/04/28 12:0 a.m.8 views

CVE-2026-37750

A reflected Cross-Site Scripting XSS vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php...

5.8AI score0.0037EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/04/28 12:0 a.m.8 views

CVE-2026-37750

A reflected Cross-Site Scripting XSS vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php...

5.8AI score0.0037EPSS
SaveExploits1References3
OSV
OSV
added 2026/04/27 5:32 p.m.11 views

CVE-2026-31687 gpio: omap: do not register driver in probe()

In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe Commit 11a78b794496 "ARM: OMAP: MPUIO wake updates" registers the omapmpuiodriver from omapmpuioinit, which is called from omapgpioprobe. However, it neither makes sense to register...

5.9AI score
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-31592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Protect all of sevmemencregisterregion with kvm-lock Take and hold kvm-lock for before checking sevguest in sevmemencregisterregion, as sevguest isn't...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/04/26 1:19 p.m.8 views

CVE-2018-25278 PicaJet FX 2.6.5 Denial of Service via Registration Fields

PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields via the Help menu's Register PicaJet...

6.9CVSS5.5AI score0.00145EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2026/04/26 8:2 a.m.14 views

KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION

...

5.5CVSS5.8AI score0.00125EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/04/25 1:39 a.m.23 views

SUSE CVE-2026-31564

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix base address calculation in kvmeiointcregsaccess In function kvmeiointcregsaccess, the register base address is caculated from array base address plus offset, the offset is absolute value from the base address...

5.5CVSS5.4AI score0.00107EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/04/25 1:38 a.m.12 views

SUSE CVE-2026-31578

In the Linux kernel, the following vulnerability has been resolved: media: as102: fix to not free memory after the device is registered in as102usbprobe In as102usb driver, the following race condition occurs: CPU0 CPU1 as102usbprobe kzalloc; // alloc as102devt .... usbregisterdev; fd =...

5.5CVSS5.5AI score0.00128EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/04/25 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-31562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/mediatek: dsi: Store driver data before invoking mipidsihostregister The call to mipidsihostregister triggers a callback to mtkdsibind, which uses...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0References3
Rows per page
Query Builder