Lucene search
+L

4244 matches found

osv_ubuntu
osv_ubuntu
•added 2025/12/16 2:15 p.m.•16 views

UBUNTU-CVE-2025-68198

In the Linux kernel, the following vulnerability has been resolved: crash: fix crashkernel resource shrink When crashkernel is configured with a high reservation, shrinking its value below the low crashkernel reservation causes two issues: 1. Invalid crashkernel resource objects 2. Kernel crash i...

6AI score0.00199EPSS
SaveExploits0References22
Cvelist
Cvelist
•added 2025/12/16 1:48 p.m.•47 views

CVE-2025-68198 crash: fix crashkernel resource shrink

In the Linux kernel, the following vulnerability has been resolved: crash: fix crashkernel resource shrink When crashkernel is configured with a high reservation, shrinking its value below the low crashkernel reservation causes two issues: 1. Invalid crashkernel resource objects 2. Kernel crash i...

0.00199EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2025/12/16 1:43 p.m.•19 views

CVE-2025-68189 drm/msm: Fix GEM free for imported dma-bufs

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix GEM free for imported dma-bufs Imported dma-bufs also have obj-resv != &obj-resv. So we should check both this condition in addition to flags for handling the NOSHARE case. Fixes this splat that was reported with IRI...

7.8CVSS6.4AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2025/12/16 1:43 p.m.•51 views

CVE-2025-68189 drm/msm: Fix GEM free for imported dma-bufs

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix GEM free for imported dma-bufs Imported dma-bufs also have obj-resv != &obj-resv. So we should check both this condition in addition to flags for handling the NOSHARE case. Fixes this splat that was reported with IRI...

7.8CVSS0.00143EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/16 1:43 p.m.•64 views

CVE-2025-68189

CVE-2025-68189 concerns the Linux kernel DRM MSM GEM memory handling. The issue arises in imported dma-bufs where obj->resv may not match obj->_resv, and the fix adds a check for this condition alongside existing NO_SHARE/flags logic. This defect could affect GEM object freeing and handle c...

7.8CVSS5.6AI score0.00143EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•55 views

PT-2025-51602

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc7 Description The Linux kernel contains a flaw within the drm/msm subsystem related to the handling of imported DMA buffers during object freeing. Specifically, the condition checking for the NO SHARE ca...

6.6AI score0.00712EPSS
SaveExploits5References385
osv_cve
osv_cve
•added 2025/12/15 9:15 p.m.•15 views

CVE-2023-53877

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickupid parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database...

9.8CVSS5.8AI score0.00448EPSS
SaveExploits1References3
NVD
NVD
•added 2025/12/15 9:15 p.m.•21 views

CVE-2023-53877

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickupid parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database...

9.8CVSS0.00448EPSS
SaveExploits1References3
CVE
CVE
•added 2025/12/15 8:28 p.m.•50 views

CVE-2023-53877

CVE-2023-53877 affects Bus Reservation System 1.1. The vulnerability is a SQL injection in the pickup_id parameter, enabling attackers to manipulate database queries. Techniques cited: boolean-based , error-based , and time-based blind SQL injection to steal information from the database. Practic...

9.8CVSS5.8AI score0.00448EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/15 8:28 p.m.•9 views

CVE-2023-53877 Bus Reservation System 1.1 Multiple SQL Injection via pickup_id Parameter

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickupid parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database...

9.3CVSS5.8AI score0.00448EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/12/15 8:28 p.m.•41 views

CVE-2023-53877 Bus Reservation System 1.1 Multiple SQL Injection via pickup_id Parameter

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickupid parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database...

9.3CVSS0.00448EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/12/15 12:00 a.m.•18 views

Bus Reservation System SQL注入漏洞

Bus Reservation System is a PHPJabbers open source bus reservation system. A SQL injection vulnerability exists in Bus Reservation System version 1.1, which stems from a SQL injection in the pickupid parameter, and could lead to manipulation of database queries and theft of information...

9.8CVSS7.7AI score0.00448EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/12/15 12:00 a.m.•24 views

PT-2025-51295

Name of the Vulnerable Software and Affected Versions Bus Reservation System version 1.1 Description The Bus Reservation System version 1.1 contains a SQL injection issue in the pickup id parameter. This allows attackers to manipulate database queries using boolean-based, error-based, and...

9.8CVSS5.8AI score0.00448EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/15 12:00 a.m.•4 views

CVE-2023-53877: Improper Neutralization of Special Elements used in an SQL Command

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickupid parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database...

9.8CVSS5.8AI score0.00448EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/04 12:30 p.m.•26 views

CVE-2025-13802

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

5.3CVSS5.5AI score0.00321EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/01 3:15 a.m.•22 views

CVE-2025-13802

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

5.3CVSS0.00321EPSS
SaveExploits0References4
CVE
CVE
•added 2025/12/01 2:02 a.m.•33 views

CVE-2025-13802

Affects jairiidriss RestaurantWebsite (Make a Reservation component). The vulnerability is a cross-site scripting flaw caused by how the selected_date argument is handled. It is exploitable remotely and has been publicly disclosed. No affected versions or updated releases are specified. The vendo...

5.3CVSS3.7AI score0.00321EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/12/01 2:02 a.m.•20 views

EUVD-2025-199948

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

5.3CVSS5.1AI score0.00321EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/12/01 2:02 a.m.•8 views

CVE-2025-13802 jairiidriss RestaurantWebsite Make a Reservation cross site scripting

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

5.3CVSS3.7AI score0.00321EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2025/12/01 2:02 a.m.•6 views

CVE-2025-13802 jairiidriss RestaurantWebsite Make a Reservation cross site scripting

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selecteddate causes cross site scripting. The attack can be initiated remotely. Th...

5.3CVSS3.9AI score
SaveExploits0References6
Rows per page
Query Builder