Lucene search
+L

24342 matches found

osv_cve
osv_cve
•added 2025/10/06 6:15 a.m.•25 views

CVE-2025-11323

A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation of the argument Username causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

8.7CVSS6AI score0.00752EPSS
SaveExploits1References4
NVD
NVD
•added 2025/10/06 6:15 a.m.•23 views

CVE-2025-11323

A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation of the argument Username causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

9CVSS0.00752EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/10/06 6:02 a.m.•38 views

CVE-2025-11323 UTT 1250GW formUserStatusRemark strcpy buffer overflow

A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation of the argument Username causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

9CVSS0.00752EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/10/06 4:02 a.m.•3 views

CVE-2025-11319 nahiduddinahammed Hospital-Management-System-Website delete.php sql injection

A weakness has been identified in nahiduddinahammed Hospital-Management-System-Website up to e6562429e14b2f88bd2139cae16e87b965024097. This issue affects some unknown processing of the file /delete.php. This manipulation of the argument ai causes sql injection. It is possible to initiate the atta...

6.5CVSS6.3AI score0.00248EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/06 4:02 a.m.•9 views

EUVD-2025-32486

A weakness has been identified in nahiduddinahammed Hospital-Management-System-Website up to e6562429e14b2f88bd2139cae16e87b965024097. This issue affects some unknown processing of the file /delete.php. This manipulation of the argument ai causes sql injection. It is possible to initiate the atta...

6.5CVSS6.4AI score0.00248EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/10/06 3:32 a.m.•10 views

CVE-2025-11318 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 uploadWxFile.do unrestricted upload

A security flaw has been discovered in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This vulnerability affects unknown code of the file uploadWxFile.do. The manipulation of the argument File results in unrestricted upload. The attack may be performed from remote. The exploit...

7.5CVSS6.8AI score0.00558EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/10/06 3:15 a.m.•19 views

CVE-2025-11317

A vulnerability was identified in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This affects the function findRolePage of the file findSingConfigPage.do. The manipulation of the argument sort leads to sql injection. The attack is possible to be carried out remotely. The explo...

9.8CVSS5.7AI score0.00502EPSS
SaveExploits1References4
NVD
NVD
•added 2025/10/06 3:15 a.m.•18 views

CVE-2025-11317

A vulnerability was identified in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This affects the function findRolePage of the file findSingConfigPage.do. The manipulation of the argument sort leads to sql injection. The attack is possible to be carried out remotely. The explo...

9.8CVSS0.00502EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/10/06 2:32 a.m.•12 views

CVE-2025-11316 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findCategoryPage.do findCategoryPage sql injection

A vulnerability was determined in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Affected by this issue is the function findCategoryPage of the file findCategoryPage.do. Executing manipulation of the argument tenantId can lead to sql injection. The attack can be executed...

7.5CVSS7AI score0.00502EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/06 2:32 a.m.•22 views

EUVD-2025-32484

A vulnerability was determined in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Affected by this issue is the function findCategoryPage of the file findCategoryPage.do. Executing manipulation of the argument tenantId can lead to sql injection. The attack can be executed...

7.5CVSS6.5AI score0.00502EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/06 2:32 a.m.•41 views

CVE-2025-11316

CVE-2025-11316 affects Tipray Data Leakage Prevention System (天锐数据泄露防护系统) version 1.0. The vulnerability is in the function findCategoryPage in the file findCategoryPage.do, where manipulation of the argument tenantId can lead to an SQL injection. The issue is exploitable remotely, and public exp...

9.8CVSS7AI score0.00502EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
•added 2025/10/06 2:02 a.m.•25 views

EUVD-2025-32478

A vulnerability was found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Affected by this vulnerability is the function findUserPage of the file findUserPage.do. Performing manipulation of the argument sort results in sql injection. Remote exploitation of the attack is...

7.5CVSS6.2AI score0.00502EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/10/06 2:02 a.m.•10 views

CVE-2025-11315 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findUserPage.do findUserPage sql injection

A vulnerability was found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Affected by this vulnerability is the function findUserPage of the file findUserPage.do. Performing manipulation of the argument sort results in sql injection. Remote exploitation of the attack is...

7.5CVSS6.9AI score0.00502EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/06 2:02 a.m.•34 views

CVE-2025-11315

Tipray Data Leakage Prevention System 1.0 is affected. The vulnerability is in the findUserPage.do file, specifically the findUserPage function, where manipulation of the sort argument enables SQL injection. It is remotely exploitable and the exploit has been made public. The vendor was contacted...

9.8CVSS6.9AI score0.00502EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/10/06 1:32 a.m.•34 views

CVE-2025-11314 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findSingConfigPage.do findRolePage sql injection

A vulnerability has been found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. Affected is the function findRolePage of the file findSingConfigPage.do. Such manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00502EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/10/06 1:02 a.m.•34 views

CVE-2025-11313 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findRolePage.do findRolePage sql injection

A flaw has been found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This impacts the function findRolePage of the file findRolePage.do. This manipulation of the argument sort causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS0.00502EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/06 1:02 a.m.•21 views

EUVD-2025-32482

A flaw has been found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This impacts the function findRolePage of the file findRolePage.do. This manipulation of the argument sort causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS6.3AI score0.00502EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/06 1:02 a.m.•39 views

CVE-2025-11313

Tipray Data Leakage Prevention System 1.0 has a SQL injection in findRolePage.do (findRolePage) caused by improper handling of the sort parameter. The flaw can be exploited remotely; exploit published. Vendor contact noted with no response. No remediation details are provided in the supplied docu...

9.8CVSS7AI score0.00502EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
•added 2025/10/06 12:32 a.m.•18 views

EUVD-2025-32477

A vulnerability was detected in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This affects the function findModulePage of the file findModulePage.do. The manipulation of the argument sort results in sql injection. The attack can be launched remotely. The exploit is now public...

7.5CVSS6.5AI score0.00502EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/06 12:30 a.m.•23 views

EUVD-2025-32471

A vulnerability has been found in UTT HiPER 840G up to 3.1.1-190328. Affected by this issue is the function strcpy of the file /goform/formTaskEdit. The manipulation of the argument txtMin2 leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to...

9CVSS6.2AI score0.0097EPSS
SaveExploits1References5
Rows per page
Query Builder