CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5981 matches found

CNNVD•added 2025/10/07 12:00 a.m.•7 views

Code-Projects Simple Banking System SQL注入漏洞

Simple Banking System is a simple banking system. Simple Banking System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Name in the file /createuser.php. An attacker can exploit this vulnerability to execute...

8.8CVSS8.1AI score0.00306EPSS

SaveExploits1References5

CNNVD•added 2025/10/07 12:00 a.m.•12 views

Nozomi Networks Guardian/CMC SQL注入漏洞

Nozomi Networks Guardian/CMC is a centralized management console from Nozomi Networks, Inc. in the United States. A SQL injection vulnerability exists in Nozomi Networks Guardian/CMC that stems from improper validation of input parameters in the Alert function, which could lead to an SQL injectio...

6.5CVSS7.7AI score0.00223EPSS

SaveExploits0References1

Snyk•added 2025/10/06 8:16 p.m.•3 views

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the orderField parameter in the REST API. An attacker can execute arbitrary HQL statements by injecting crafted input, potentially leading to unauthorized data access or manipulation. Remediation Upgrade...

9.8CVSS8AI score0.02207EPSS

SaveExploits0References2

Vulnrichment•added 2025/10/06 1:02 a.m.•6 views

CVE-2025-11313 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findRolePage.do findRolePage sql injection

A flaw has been found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This impacts the function findRolePage of the file findRolePage.do. This manipulation of the argument sort causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS7.2AI score0.00462EPSS

SaveExploits1References4

Positive Technologies•added 2025/10/06 12:00 a.m.•25 views

PT-2025-40935

Name of the Vulnerable Software and Affected Versions code-projects Online Course Registration version 1.0 Description A flaw exists in code-projects Online Course Registration 1.0 that allows for SQL injection. The issue is located in the file /admin/edit-course.php and involves manipulation of...

5.8CVSS5.2AI score0.00381EPSS

SaveExploits1References9

Positive Technologies•added 2025/10/05 12:00 a.m.•14 views

PT-2025-40825

Name of the Vulnerable Software and Affected Versions Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 version 1.0 Description A security flaw exists in the doFilter function of the findDeptPage.do file. Manipulation of the sort argument can lead to SQL injection. This issue can be...

7.5CVSS7.4AI score0.00456EPSS

SaveExploits1References8