Lucene search
+L

3874 matches found

NVD
NVD
•added 2025/12/08 4:15 a.m.•14 views

CVE-2025-14214

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

8.8CVSS0.00332EPSS
SaveExploits1References6
OSV
OSV
•added 2025/12/08 4:15 a.m.•31 views

CVE-2025-14214

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

8.8CVSS5.6AI score0.00332EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/12/08 3:32 a.m.•16 views

EUVD-2025-201665

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

6.5CVSS6.4AI score0.00332EPSS
SaveExploits1References7
CVE
CVE
•added 2025/12/08 3:32 a.m.•33 views

CVE-2025-14214

CVE-2025-14214 affects itsourcecode Student Information System 1.0. The vulnerability is a SQL injection in the file /section_edit1.php caused by manipulation of the ID parameter. Remote exploitation is possible and exploits have been publicly disclosed. Multiple connected sources confirm the iss...

8.8CVSS6.4AI score0.00332EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/08 3:32 a.m.•7 views

CVE-2025-14214 itsourcecode Student Information System section_edit1.php sql injection

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

6.5CVSS6.4AI score0.00332EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/12/08 3:32 a.m.•54 views

CVE-2025-14214 itsourcecode Student Information System section_edit1.php sql injection

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

6.5CVSS0.00332EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/12/08 12:00 a.m.•18 views

PT-2025-49504

Name of the Vulnerable Software and Affected Versions itsourcecode Student Information System version 1.0 Description A SQL injection issue exists in itsourcecode Student Information System 1.0. The issue is located in an unknown part of the file '/section edit1.php'. Manipulation of the ID...

8.8CVSS6.6AI score0.00332EPSS
SaveExploits1References12
Patchstack
Patchstack
•added 2025/12/07 1:44 p.m.•15 views

WordPress Make Section & Column Clickable For Elementor plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mdr in WordPress Plugin Make Section & Column Clickable For Elementor versions = 2.4...

5.9CVSS6.1AI score0.0021EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/12/05 3:30 p.m.•24 views

EUVD-2025-201407

NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...

6.9CVSS5.8AI score0.00145EPSS
SaveExploits1References2
OSV
OSV
•added 2025/12/05 1:16 p.m.•14 views

CVE-2025-6966

NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...

5.5CVSS5.5AI score
SaveExploits0References2
NVD
NVD
•added 2025/12/05 1:16 p.m.•21 views

CVE-2025-6966

NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...

6.9CVSS0.00145EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2025/12/05 12:59 p.m.•58 views

CVE-2025-6966

NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...

6.9CVSS5.8AI score0.00145EPSS
SaveExploits1
Mageia
Mageia
•added 2025/12/04 11:29 p.m.•22 views

Updated unbound packages fix security vulnerabilities

Possible domain hijacking via promiscuous records in the authority section. CVE-2025-11411. Previous fixes for CVE-2025-11411 released with Unbound 1.24.1 were not complete...

7.1CVSS7.6AI score0.0033EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/03 5:02 p.m.•11 views

CVE-2025-54065 GZDoom engine allows arbitrary code execution via ZScript actor states

GZDoom is a feature centric port for all Doom engine games. GZDoom is an open source Doom engine. In versions 4.14.2 and earlier, ZScript actor state handling allows scripts to read arbitrary addresses, write constants into the JIT-compiled code section, and redirect control flow through crafted...

7.9CVSS6.5AI score0.00137EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/03 2:11 p.m.•14 views

CLSA-2025-1764771100 Fix CVE(s): CVE-2019-1010180

SECURITY UPDATE: Buffer overflow when ELF section size is invalid - debian/patches/CVE-2019-1010180.patch: Skip processing invalid ELF sections - CVE-2019-1010180...

7.8CVSS6.9AI score0.02628EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2025/12/03 12:00 a.m.•59 views

Sulu XSS Vulnerability (GHSA-255w-87rh-rg44)

Sulu is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sulu:sulu"; if...

5.4CVSS5.7AI score0.00347EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/11/26 12:00 a.m.•17 views

FreeBSD Security Advisory - FreeBSD-SA-25:10.unbound

FreeBSD Security Advisory - Promiscuous NS RRSets that complement DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are used to update the resolver's knowledge of the zone's name servers. If a malicious...

7.1CVSS7.5AI score0.0033EPSS
SaveExploits0
OSV
OSV
•added 2025/11/25 10:18 p.m.•13 views

JLSEC-2025-285 LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in `tools/tiffcrop.c:7345`, allowing...

LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125...

6.5CVSS6.7AI score0.01034EPSS
SaveExploits1References6
OSV
OSV
•added 2025/11/25 10:18 p.m.•13 views

JLSEC-2025-301 A flaw was found in tiffcrop, a program distributed by the libtiff package

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff...

6.1CVSS6.4AI score0.00361EPSS
SaveExploits1References4
OSV
OSV
•added 2025/11/25 10:18 p.m.•15 views

JLSEC-2025-314 A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at...

A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file...

5.5CVSS6.4AI score0.00319EPSS
SaveExploits0References3
Rows per page
Query Builder