Lucene search
K

29 matches found

EUVD
EUVD
added 2026/05/08 3:31 p.m.3 views

EUVD-2026-28713

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in cephhandleauthreply This patch fixes an out-of-bounds access in cephhandleauthreply that can be triggered by a message of type CEPHMSGAUTHREPLY. In cephhandleauthreply, the value of...

5.8AI score0.0007EPSS
Exploits0References9
NVD
NVD
added 2026/05/08 4:16 a.m.6 views

CVE-2026-8131

A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0. This impacts an unknown function of the file /admin/replymsg.php. The manipulation of the argument msgid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the publ...

7.5CVSS0.00013EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/08 3:0 a.m.3 views

CVE-2026-8131

A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0. This impacts an unknown function of the file /admin/replymsg.php. The manipulation of the argument msgid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the publ...

7.5CVSS6.9AI score0.00013EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.3 views

SourceCodester SUP Online Shopping 注入漏洞

SourceCodester SUP Online Shopping is an open-source online shopping system developed by SourceCodester. Version 1.0 of SourceCodester SUP Online Shopping contains a vulnerability due to improper handling of parameters in the file admin/replymsg.php, which may lead to SQL injection attacks...

7.5CVSS7.2AI score0.00013EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2025/12/30 1:16 p.m.1 views

CVE-2022-50861

In the Linux kernel, the following vulnerability has been resolved: NFSD: Finish converting the NFSv2 GETACL result encoder The xdrstream conversion inadvertently left some code that set the pagelen of the send buffer. The XDR stream encoders should handle this automatically now. This oversight...

5.8AI score0.00022EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/12/30 12:15 p.m.26 views

CVE-2022-50861 NFSD: Finish converting the NFSv2 GETACL result encoder

In the Linux kernel, the following vulnerability has been resolved: NFSD: Finish converting the NFSv2 GETACL result encoder The xdrstream conversion inadvertently left some code that set the pagelen of the send buffer. The XDR stream encoders should handle this automatically now. This oversight...

0.00022EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.2 views

PT-2025-53979

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel's Network File System Daemon NFSD related to the NFSv2 GETACL result encoder. A conversion oversight within the xdr stream encoders resulted in the...

7.8CVSS7.8AI score0.00249EPSS
Exploits2References896
RedhatCVE
RedhatCVE
added 2025/11/12 1:6 p.m.4 views

CVE-2025-41103

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'replymessage' in '/messages/reply'...

5.4CVSS7.3AI score0.00023EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/11 3:31 p.m.2 views

EUVD-2025-84355

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'replymessage' in '/messages/reply'...

5.1CVSS6.8AI score0.00023EPSS
Exploits0References2
OSV
OSV
added 2025/11/11 1:15 p.m.0 views

CVE-2025-41103

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'replymessage' in '/messages/reply'...

5.4CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/11/11 1:15 p.m.3 views

CVE-2025-41103

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'replymessage' in '/messages/reply'...

5.4CVSS0.00023EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/11 12:16 p.m.8 views

CVE-2025-41103 Multiple vulnerabilities in Fairsketch's RISE CRM Framework

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'replymessage' in '/messages/reply'...

5.1CVSS0.00023EPSS
Exploits0References1
CVE
CVE
added 2025/11/11 12:16 p.m.8 views

CVE-2025-41103

CVE-2025-41103: HTML injection in Fairsketch’s RISE CRM Framework v3.8.1 due to insufficient validation of user input in the POST parameter reply_message of /messages/reply. This is a client-facing input validation flaw that enables injection of HTML content into responses. The CVE is corroborate...

5.4CVSS6.9AI score0.00023EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/11 12:16 p.m.3 views

CVE-2025-41103 Multiple vulnerabilities in Fairsketch's RISE CRM Framework

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'replymessage' in '/messages/reply'...

5.1CVSS6.9AI score0.00023EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.4 views

PT-2025-46331

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'reply message' in '/messages/reply'...

5.1CVSS7.3AI score0.00023EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.3 views

FairSketch Rise Ultimate Project Manager and CRM 跨站脚本漏洞

FairSketch Rise Ultimate Project Manager and CRM is a team management and customer relationship management system from FairSketch. A cross-site scripting vulnerability exists in FairSketch Rise Ultimate Project Manager and CRM version 3.8.1, which stems from insufficient validation of user input...

5.4CVSS6.2AI score0.00023EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-37302

Malicious code in bioql PyPI...

8.4CVSS7.5AI score0.0011EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:56 a.m.3 views

CVE-2023-33113

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments...

8.4CVSS7.1AI score0.0011EPSS
Exploits0References1
NVD
NVD
added 2024/01/02 6:15 a.m.14 views

CVE-2023-33113

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments...

8.4CVSS8.5AI score0.0011EPSS
Exploits0References1
Prion
Prion
added 2024/01/02 6:15 a.m.14 views

Memory corruption

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments...

4.3CVSS7.3AI score0.0011EPSS
Exploits0References1
Rows per page
Query Builder