Lucene search
+L

11824 matches found

OSV
OSV
added 2024/02/25 8:16 a.m.8 views

CVE-2023-52467 mfd: syscon: Fix null pointer dereference in of_syscon_register()

In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in ofsysconregister kasprintf returns a pointer to dynamically allocated memory which can be NULL upon failure...

5.8AI score
SaveExploits0References10
OSV
OSV
added 2024/02/23 6:15 p.m.9 views

CVE-2024-1828

A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. Affected is an unknown function of the file Source/librarian/user/teacher/registration.php. The manipulation of the argument email/idno/phone/username leads to sql injection. It is possible to launc...

9.8CVSS5.7AI score0.00731EPSS
SaveExploits1References3
OSV
OSV
added 2024/02/23 6:15 p.m.11 views

CVE-2024-1829

A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injectio...

9.8CVSS5.7AI score0.0076EPSS
SaveExploits1References3
Prion
Prion
added 2024/02/23 6:15 p.m.23 views

Sql injection

A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injectio...

7.5CVSS7.7AI score0.0076EPSS
SaveExploits1References3
CVE
CVE
added 2024/02/23 6:00 p.m.113 views

CVE-2024-1828

Code-projects Library System 1.0 is affected by a SQL injection in Source/librarian/user/teacher/registration.php. The vulnerability arises from unsafely handling the arguments email, idno, phone, and username, enabling remote exploitation. Public exploitation information is present, and the entr...

9.8CVSS7.5AI score0.00731EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/02/23 5:15 p.m.8 views

CVE-2024-1825

A vulnerability, which was classified as problematic, was found in CodeAstro House Rental Management System 1.0. This affects an unknown part of the component User Registration Page. The manipulation of the argument address with the input leads to cross site scripting. It is possible to initiate...

6.1CVSS3.9AI score0.00484EPSS
SaveExploits0References3
NVD
NVD
added 2024/02/23 5:15 p.m.27 views

CVE-2024-1825

A vulnerability, which was classified as problematic, was found in CodeAstro House Rental Management System 1.0. This affects an unknown part of the component User Registration Page. The manipulation of the argument address with the input leads to cross site scripting. It is possible to initiate...

6.1CVSS4.3AI score0.00484EPSS
SaveExploits0References3
Prion
Prion
added 2024/02/23 5:15 p.m.26 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in CodeAstro House Rental Management System 1.0. This affects an unknown part of the component User Registration Page. The manipulation of the argument address with the input leads to cross site scripting. It is possible to initiate...

5CVSS6.4AI score0.00484EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/02/23 4:31 p.m.18 views

CVE-2024-1825 CodeAstro House Rental Management System User Registration Page cross site scripting

A vulnerability, which was classified as problematic, was found in CodeAstro House Rental Management System 1.0. This affects an unknown part of the component User Registration Page. The manipulation of the argument address with the input leads to cross site scripting. It is possible to initiate...

5CVSS6.2AI score0.00484EPSS
SaveExploits0References3
Veracode
Veracode
added 2024/02/23 10:00 a.m.20 views

Race Condition

github.com/apache/incubator-answer is vulnerable to a Race Condition. The vulnerability is due to improper synchronization during user registration, specifically when users rapidly submit multiple registrations using scripts. This can lead to the registration of multiple user accounts with the sa...

5.9CVSS7AI score0.00895EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/23 12:00 a.m.11 views

PT-2024-18344 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical issue was found in the code-projects Library System, affecting an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the email...

9.8CVSS7.8AI score0.0076EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/02/23 12:00 a.m.9 views

House Rental Management System Cross-Site Scripting Vulnerability

House Rental Management System is a house rental management system from the individual developer Carlo Montero. A cross-site scripting vulnerability exists in CodeAstro House Rental Management System version 1.0, which stems from the cross-site scripting caused by the address parameter of the...

6.1CVSS6.2AI score0.00484EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/23 12:00 a.m.13 views

PT-2024-18343 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical issue has been found in the code-projects Library System, affecting an unknown function of the file Source/librarian/user/teacher/registration.php. The manipulation of the...

9.8CVSS7.8AI score0.00731EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/02/23 12:00 a.m.9 views

Library System SQL Injection Vulnerability

Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters email/regno/phone/username can lead to sql injection...

9.8CVSS8.4AI score0.0076EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/02/23 12:00 a.m.9 views

PT-2024-18340 · Unknown · Codeastro House Rental Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro House Rental Management System version 1.0 Description: A problematic issue was found in the User Registration Page component, allowing for cross-site scripting through the manipulation of the address argument with malicious input,...

6.1CVSS6.4AI score0.00484EPSS
SaveExploits0References6
OSV
OSV
added 2024/02/22 12:30 p.m.87 views

GHSA-9Q24-HWMC-797X Apache Answer Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1. Repeated submission during registration resulted in the registration of the same user. When users register, if they rapidly...

5.9CVSS5.6AI score0.00895EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2024/02/22 12:30 p.m.35 views

Apache Answer Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1. Repeated submission during registration resulted in the registration of the same user. When users register, if they rapidly...

5.9CVSS7AI score0.00895EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2024/02/22 10:15 a.m.49 views

CVE-2024-26578

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Repeated submission during registration resulted in the registration of the same user. When users register, if they rapidly...

5.9CVSS6.6AI score0.00895EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/22 10:15 a.m.36 views

Race condition

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Repeated submission during registration resulted in the registration of the same user. When users register, if they rapidly...

6.9AI score0.00895EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/22 9:28 a.m.6651 views

CVE-2024-26578

CVE-2024-26578 describes a race condition in Apache Answer (through 1.2.1) caused by concurrent access to a shared resource during user registration, enabling rapid scripted submissions to create multiple accounts with the same name. The issue is a synchronization flaw that can affect account cre...

5.9CVSS5.7AI score0.00895EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder