Lucene search
+L

2311 matches found

attackerkb
attackerkb
•added 2026/02/07 3:02 p.m.•10 views

CVE-2026-2089

A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS7.2AI score0.00332EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/07 3:02 p.m.•9 views

CVE-2026-2089 SourceCodester Online Class Record System controller.php sql injection

A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS5.5AI score0.00332EPSS
SaveExploits0References5
NVD
NVD
•added 2026/02/07 12:15 a.m.•14 views

CVE-2020-37109

aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Subject title field with a large buffer. Attackers can generate a 1000-character buffer and paste it into the Subject title to trigger an application crash and...

7.5CVSS0.00383EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/07 12:00 a.m.•1 views

CVE-2020-37109: Buffer Copy without Checking Size of Input

aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Subject title field with a large buffer. Attackers can generate a 1000-character buffer and paste it into the Subject title to trigger an application crash and...

7.5CVSS6AI score0.00383EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/07 12:00 a.m.•19 views

aSc TimeTables 安全漏洞

aSc TimeTables is an automated course scheduling software developed by the Slovak company aSc. The aSc TimeTables version 2020.11.4 contains a security vulnerability. This vulnerability stems from a large buffer overflow in the Subject title field, which could allow attackers to cause the...

7.5CVSS6AI score0.00383EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/02/07 12:00 a.m.•28 views

PT-2026-6910

Name of the Vulnerable Software and Affected Versions SourceCodester Online Class Record System version 1.0 Description A flaw exists in SourceCodester Online Class Record System 1.0 that allows for SQL injection. The issue is located in the file /admin/subject/controller.php. Manipulating the ID...

9.8CVSS5.4AI score0.00332EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/07 12:00 a.m.•2 views

CVE-2026-2089: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

9.8CVSS7AI score0.00332EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/07 12:00 a.m.•17 views

SourceCodester Online Class Record System SQL注入漏洞

The SourceCodester Online Class Record System is an open-source online classroom recording system developed by SourceCodester. Version 1.0 of the SourceCodester Online Class Record System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ID in t...

9.8CVSS7.2AI score0.00332EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/02/06 11:14 p.m.•8 views

CVE-2020-37109

aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Subject title field with a large buffer. Attackers can generate a 1000-character buffer and paste it into the Subject title to trigger an application crash and...

7.5CVSS5.6AI score0.00383EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/02/06 11:14 p.m.•19 views

CVE-2020-37109

The CVE-2020-37109 entry affects aSc TimeTables 2020.11.4. The vulnerability is a denial-of-service caused by overwriting the Subject title field with a large buffer (about 1000 characters), which can crash the application and cause instability. Public sources (Red Hat, NVD, AttackERKB, CVE recor...

7.5CVSS5.6AI score0.00383EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/06 11:14 p.m.•50 views

CVE-2020-37109 aSc TimeTables 2020.11.4 - Denial of Service

aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Subject title field with a large buffer. Attackers can generate a 1000-character buffer and paste it into the Subject title to trigger an application crash and...

7.5CVSS0.00383EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/02/06 11:14 p.m.•8 views

CVE-2020-37109 aSc TimeTables 2020.11.4 - Denial of Service

aSc TimeTables 2020.11.4 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Subject title field with a large buffer. Attackers can generate a 1000-character buffer and paste it into the Subject title to trigger an application crash and...

7.5CVSS5.8AI score0.00383EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/06 12:00 a.m.•16 views

PT-2026-6816

Name of the Vulnerable Software and Affected Versions aSc TimeTables version 2020.11.4 Description The application can be crashed, leading to a denial of service, by overwriting the Subject title field with a large buffer. An attacker can generate a 1000-character buffer and paste it into the...

7.5CVSS5.8AI score0.00383EPSS
SaveExploits0References5
OSV
OSV
•added 2026/02/03 9:51 a.m.•20 views

CLSA-2026-1770112258 golang: Fix of CVE-2025-61729

CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs...

7.2AI score0.00457EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
•added 2026/01/31 12:00 a.m.•10 views

EulerOS Virtualization 2.10.1 : gnutls (EulerOS-SA-2026-1118)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of...

8.2CVSS5.8AI score0.01294EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/01/31 12:00 a.m.•8 views

EulerOS Virtualization 2.10.0 : gnutls (EulerOS-SA-2026-1169)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of...

8.2CVSS5.8AI score0.01294EPSS
SaveExploits0References5
OSV
OSV
•added 2026/01/30 4:37 p.m.•16 views

CLEANSTART-2026-FP29743 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.00623EPSS
SaveExploits3References10
OSV
OSV
•added 2026/01/30 4:36 p.m.•11 views

CLEANSTART-2026-GL18398 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00623EPSS
SaveExploits3References10
OSV
OSV
•added 2026/01/30 4:29 p.m.•13 views

CLEANSTART-2026-AU31441 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the metrics-server-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.00457EPSS
SaveExploits2References6
OSV
OSV
•added 2026/01/30 4:26 p.m.•14 views

CLEANSTART-2026-ON55906 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the mongodb package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.83218EPSS
SaveExploits39References7
Rows per page
Query Builder