Lucene search
+L

11802 matches found

OSV
OSV
added 2025/10/15 12:00 a.m.8 views

UBUNTU-CVE-2025-10230

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

10CVSS7.4AI score0.39653EPSS
SaveExploits2References4
CNVD
CNVD
added 2025/10/15 12:00 a.m.16 views

Online Job Search Engine registration.php File SQL Injection Vulnerability

Online Job Search Engine is an online job search engine. Online Job Search Engine suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter txtusername in the file /registration.php. An attacker can exploit this...

9.8CVSS8.3AI score0.00387EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/10/15 12:00 a.m.9 views

WordPress CM Registration plugin open redirection vulnerability

WordPress CM Registration plugin is a WordPress plugin for optimizing the user login and registration experience, supporting AJAX login/registration page, invitation code registration, multi-user role assignment and other functions. The WordPress CM Registration plugin suffers from an open redire...

4.7CVSS7AI score0.00198EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/10/15 12:00 a.m.7 views

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to insufficient protection of registration data, allows a violator to gain unauthorized access to user records.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to user records by sending a specially...

6.8CVSS5.8AI score0.00261EPSS
SaveExploits0References4Affected Software2
EUVD
EUVD
added 2025/10/14 9:30 p.m.19 views

EUVD-2022-55105

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix initialization of device object in vmbusdeviceregister Initialize the device's dmamask,parms pointers and the device's dmamask value before invoking deviceregister. Address the following trace with 5.17-rc...

5.5CVSS5.3AI score0.00205EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/10/14 9:46 a.m.11 views

CVE-2025-11184

Cross-site scripting vulnerability in QGIS QWC2 Registration GUI =v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page...

6.9CVSS6.7AI score0.00392EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/13 7:24 p.m.17 views

CVE-2025-11642

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected is an unknown function of the component Registration Handler. Such manipulation leads to denial of service. The attack can be executed directly on the physical device. The attack requires a high level of complexity. The...

4.1CVSS6AI score0.00137EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/13 12:31 p.m.6 views

EUVD-2025-34061

Cross-site scripting vulnerability in QGIS QWC2 Registration GUI =v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page...

6.9CVSS6.2AI score0.00392EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/13 10:15 a.m.8 views

CVE-2025-11184

Cross-site scripting vulnerability in QGIS QWC2 Registration GUI =v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page...

6.9CVSS0.00392EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/13 9:20 a.m.12 views

CVE-2025-11184 Cross-Site Scripting Vulnerability in QWC2 Registration GUI

Cross-site scripting vulnerability in QGIS QWC2 Registration GUI =v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page...

6.9CVSS6.3AI score
SaveExploits0References5
Cvelist
Cvelist
added 2025/10/13 9:20 a.m.14 views

CVE-2025-11184 Cross-Site Scripting Vulnerability in QWC2 Registration GUI

Cross-site scripting vulnerability in QGIS QWC2 Registration GUI =v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page...

6.9CVSS0.00392EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/13 9:20 a.m.13 views

CVE-2025-11184

CVE-2025-11184 affects QGIS QWC2 Registration GUI up to version 2025.03.31. It enables an authorized attacker to inject arbitrary JavaScript (XSS) into the page, with potential impact to Confidentiality (High) and Integrity (Low) per CVSS. Remediation: upgrade to a version later than 2025.03.31 (...

6.9CVSS6.4AI score0.00392EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/13 9:20 a.m.1 views

CVE-2025-11184 Cross-Site Scripting Vulnerability in QWC2 Registration GUI

Cross-site scripting vulnerability in QGIS QWC2 Registration GUI =v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page...

6.9CVSS6.4AI score0.00392EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/13 12:00 a.m.6 views

QGIS QWC2 Registration GUI 安全漏洞

The QGIS QWC2 Registration GUI is an optional application of the Web Front End Client Framework from the QGIS organization. A security vulnerability exists in QGIS QWC2 Registration GUI v2025.03.31 and earlier versions, which originates from an authorized attacker who can plant arbitrary JavaScri...

6.9CVSS6.2AI score0.00392EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/10/13 12:00 a.m.16 views

Online Course Registration /admin/edit-course.php File SQL Injection Vulnerability

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter coursecode in the file /admin/edit-course.php. An attacker ca...

9.8CVSS8.3AI score0.00381EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/10/13 12:00 a.m.9 views

PT-2025-41780

Name of the Vulnerable Software and Affected Versions QGIS QWC2 Registration GUI versions through 2025.03.31 Description A cross-site scripting issue exists in QGIS QWC2 Registration GUI. An authorized attacker can inject arbitrary JavaScript code into the page. Recommendations Update QGIS QWC2...

6.9CVSS6.1AI score0.00392EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/10/13 12:00 a.m.8 views

Online Course Registration /admin/manage-students.php File SQL Injection Vulnerability

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /admin/manage-students.php. An attacker can...

9.8CVSS8.2AI score0.00384EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/12 9:30 p.m.15 views

EUVD-2025-33907

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected is an unknown function of the component Registration Handler. Such manipulation leads to denial of service. The attack can be executed directly on the physical device. The attack requires a high level of complexity. The...

4.1CVSS4.1AI score0.00137EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/12 7:15 p.m.9 views

CVE-2025-11642

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected is an unknown function of the component Registration Handler. Such manipulation leads to denial of service. The attack can be executed directly on the physical device. The attack requires a high level of complexity. The...

4.1CVSS5.2AI score0.00137EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/12 7:15 p.m.14 views

CVE-2025-11642

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected is an unknown function of the component Registration Handler. Such manipulation leads to denial of service. The attack can be executed directly on the physical device. The attack requires a high level of complexity. The...

4.1CVSS0.00137EPSS
SaveExploits0References3
Rows per page
Query Builder