Lucene search
+L

1507 matches found

Cvelist
Cvelist
added 2025/02/20 12:0 a.m.24 views

CVE-2023-51312

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting XSS in Reservations menu, Schedule section date parameter...

0.00337EPSS
SaveExploits2References2
CVE
CVE
added 2025/02/20 12:0 a.m.50 views

CVE-2023-51312

CVE-2023-51312 affects PHPJabbers Restaurant Booking System v3.0, with a reflected Cross-Site Scripting (XSS) flaw in the Reservations menu and the Schedule date parameter. The underlying issue is untrusted input reflected in HTML/JavaScript contexts, enabling arbitrary script execution. Public e...

5.4CVSS5.3AI score0.00337EPSS
SaveExploits2References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/14 6:13 a.m.11 views

CVE-2024-34854

F-logic DataCube3 v1.0 is vulnerable to File Upload via /admin/transceiverschedule.php...

9.8CVSS6.8AI score0.12752EPSS
SaveExploits1References1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.3 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: extend minimum interval restriction to entire cycle too It is possible for syzbot to bypass the restriction imposed by the problematic commit in the “Fixes” tag, because the taprio UAPI allows a cycle time that...

5.5CVSS5.8AI score0.00249EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/05 7:44 p.m.13 views

CVE-2022-48588

A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

8.8CVSS7.7AI score0.00596EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 7:43 p.m.17 views

CVE-2022-48587

A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

8.8CVSS7.7AI score0.00608EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:22 a.m.9 views

CVE-2024-31084

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pulsar Web Design Weekly Class Schedule allows Reflected XSS.This issue affects Weekly Class Schedule: from n/a through 3.19...

7.1CVSS8.6AI score0.00354EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:45 p.m.11 views

CVE-2024-22311

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in N Squared Simply Schedule Appointments allows Reflected XSS.This issue affects Simply Schedule Appointments: from n/a through 1.6.6.20...

7.1CVSS8.6AI score0.00354EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:57 p.m.11 views

CVE-2024-0259

Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a low-privileged user to ga...

7.3CVSS7.1AI score0.00284EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2025/01/19 10:18 a.m.15 views

CVE-2025-21647

In the Linux kernel, the following vulnerability has been resolved: sched: schcake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out ...

7.1CVSS6.2AI score0.00278EPSS
SaveExploits0
CVE
CVE
added 2025/01/16 12:0 a.m.59 views

CVE-2024-57703

CVE-2024-57703 affects Tenda AC8v4, version V16.03.34.06. The vulnerability lies in the function setSchedWifi within the file /goform/openSchedWifi , where manipulation of the schedEndTime argument causes a stack-based buffer overflow. This is described with high-severity impact across multiple s...

9.8CVSS7.8AI score0.00544EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2025/01/15 5:15 p.m.5 views

CVE-2024-57025

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg...

6.8CVSS7.3AI score0.01327EPSS
SaveExploits1References2
OSV
OSV
added 2025/01/15 5:15 p.m.9 views

CVE-2024-57022

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "sHour" parameter in setWiFiScheduleCfg...

8.8CVSS7.5AI score
SaveExploits0References2
NVD
NVD
added 2025/01/15 5:15 p.m.23 views

CVE-2024-57022

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "sHour" parameter in setWiFiScheduleCfg...

8.8CVSS0.01573EPSS
SaveExploits1References2
OSV
OSV
added 2025/01/15 5:15 p.m.6 views

CVE-2024-57012

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setScheduleCfg...

8.8CVSS7.5AI score0.01573EPSS
SaveExploits1References2
NVD
NVD
added 2025/01/15 5:15 p.m.27 views

CVE-2024-57020

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "sMinute" parameter in setWiFiScheduleCfg...

8.8CVSS0.01573EPSS
SaveExploits1References2
NVD
NVD
added 2025/01/15 5:15 p.m.28 views

CVE-2024-57021

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eHour" parameter in setWiFiScheduleCfg...

8.8CVSS0.01573EPSS
SaveExploits1References2
NVD
NVD
added 2025/01/15 5:15 p.m.13 views

CVE-2024-57011

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "minute" parameters in setScheduleCfg...

8.8CVSS0.01708EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/01/15 12:0 a.m.8 views

CVE-2024-57025

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg...

8AI score0.01327EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/01/15 12:0 a.m.6 views

CVE-2024-57015

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "hour" parameter in setScheduleCfg...

8AI score0.01573EPSS
SaveExploits1References2
Rows per page
Query Builder