Lucene search
+L

2459 matches found

Positive Technologies
Positive Technologies
•added 2026/02/07 12:00 a.m.•31 views

PT-2026-6910

Name of the Vulnerable Software and Affected Versions SourceCodester Online Class Record System version 1.0 Description A flaw exists in SourceCodester Online Class Record System 1.0 that allows for SQL injection. The issue is located in the file /admin/subject/controller.php. Manipulating the ID...

9.8CVSS5.4AI score0.00363EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/07 12:00 a.m.•3 views

CVE-2026-2089: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

9.8CVSS7AI score0.00363EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/07 12:00 a.m.•3 views

CVE-2020-37109: Buffer Copy without Checking Size of Input

aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Subject title field with a large buffer. Attackers can generate a 1000-character buffer and paste it into the Subject title to trigger an application crash and...

7.5CVSS6AI score0.00406EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/07 12:00 a.m.•20 views

aSc TimeTables 安全漏洞

aSc TimeTables is an automated course scheduling software developed by the Slovak company aSc. The aSc TimeTables version 2020.11.4 contains a security vulnerability. This vulnerability stems from a large buffer overflow in the Subject title field, which could allow attackers to cause the...

7.5CVSS6AI score0.00406EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/02/07 12:00 a.m.•17 views

SourceCodester Online Class Record System SQL注入漏洞

The SourceCodester Online Class Record System is an open-source online classroom recording system developed by SourceCodester. Version 1.0 of the SourceCodester Online Class Record System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ID in t...

9.8CVSS7.2AI score0.00363EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/02/06 11:14 p.m.•9 views

CVE-2020-37109 aSc TimeTables 2020.11.4 - Denial of Service

aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Subject title field with a large buffer. Attackers can generate a 1000-character buffer and paste it into the Subject title to trigger an application crash and...

7.5CVSS6AI score0.00406EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/06 11:14 p.m.•51 views

CVE-2020-37109 aSc TimeTables 2020.11.4 - Denial of Service

aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Subject title field with a large buffer. Attackers can generate a 1000-character buffer and paste it into the Subject title to trigger an application crash and...

7.5CVSS0.00406EPSS
SaveExploits0References3
CVE
CVE
•added 2026/02/06 11:14 p.m.•23 views

CVE-2020-37109

The CVE-2020-37109 entry affects aSc TimeTables 2020.11.4. The vulnerability is a denial-of-service caused by overwriting the Subject title field with a large buffer (about 1000 characters), which can crash the application and cause instability. Public sources (Red Hat, NVD, AttackERKB, CVE recor...

7.5CVSS6AI score0.00406EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/02/06 11:14 p.m.•12 views

CVE-2020-37109

aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Subject title field with a large buffer. Attackers can generate a 1000-character buffer and paste it into the Subject title to trigger an application crash and...

7.5CVSS5.6AI score0.00406EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/06 12:00 a.m.•20 views

PT-2026-6816

Name of the Vulnerable Software and Affected Versions aSc TimeTables version 2020.11.4 Description The application can be crashed, leading to a denial of service, by overwriting the Subject title field with a large buffer. An attacker can generate a 1000-character buffer and paste it into the...

7.5CVSS5.8AI score0.00406EPSS
SaveExploits0References5
OSV
OSV
•added 2026/02/03 9:51 a.m.•25 views

CLSA-2026-1770112258 golang: Fix of CVE-2025-61729

CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs...

7.5CVSS6.7AI score0.00457EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
•added 2026/01/31 12:00 a.m.•14 views

EulerOS Virtualization 2.10.1 : gnutls (EulerOS-SA-2026-1118)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of...

8.2CVSS6.8AI score0.01373EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/01/31 12:00 a.m.•11 views

EulerOS Virtualization 2.10.0 : gnutls (EulerOS-SA-2026-1169)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of...

8.2CVSS6.8AI score0.01373EPSS
SaveExploits0References5
OSV
OSV
•added 2026/01/30 4:37 p.m.•18 views

CLEANSTART-2026-FP29743 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.00623EPSS
SaveExploits3References10
OSV
OSV
•added 2026/01/30 4:36 p.m.•13 views

CLEANSTART-2026-GL18398 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00623EPSS
SaveExploits3References10
OSV
OSV
•added 2026/01/30 4:29 p.m.•16 views

CLEANSTART-2026-AU31441 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the metrics-server-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.00457EPSS
SaveExploits2References6
OSV
OSV
•added 2026/01/30 4:26 p.m.•16 views

CLEANSTART-2026-ON55906 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the mongodb package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS7AI score0.83218EPSS
SaveExploits39References7
OSV
OSV
•added 2026/01/30 4:25 p.m.•12 views

CLEANSTART-2026-RN77098 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the mongodb package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS7AI score0.83218EPSS
SaveExploits39References7
OSV
OSV
•added 2026/01/30 4:23 p.m.•17 views

CLEANSTART-2026-CQ38405 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-node-exporter-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.00457EPSS
SaveExploits2References11
OSV
OSV
•added 2026/01/30 4:22 p.m.•12 views

CLEANSTART-2026-PT11267 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the stakater-reloader-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.00457EPSS
SaveExploits2References5
Rows per page
Query Builder