Lucene search
+L

8158 matches found

Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•19 views

PT-2026-4365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has a flaw in the handling of references for DSA Distributed Switch Architecture conduits and their associated kobjects. Specifically, the OF Device Tree path does not...

7.8CVSS5.4AI score0.0014EPSS
SaveExploits0
Circl
Circl
•added 2024/12/31 10:20 a.m.•18 views

CVE-2024-56230

creationtimestamp| type| source ---|---|--- 2024-12-31 10:20:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113746932186297932 2024-12-31 12:02:01+00:00| seen| https://t.me/cvedetector/13980...

7.5CVSS8.7AI score0.00561EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/31 12:00 a.m.•18 views

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from a LogServer link tracking vulnerability that could allow a local attacker to elevate privileges on an affected installation...

7.8CVSS6.1AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/31 12:00 a.m.•17 views

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from a security proxy link tracking vulnerability that could allow a local attacker to elevate the privileges of an affected installation...

7.8CVSS6.2AI score0.00331EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/31 12:00 a.m.•19 views

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from an engine link tracking vulnerability that could allow a local attacker to elevate the privileges of an affected installation...

7.8CVSS6.2AI score0.00331EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/31 12:00 a.m.•24 views

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from a LogServer link tracking vulnerability that could allow a local attacker to elevate privileges on an affected installation...

7.8CVSS6.1AI score0.00331EPSS
SaveExploits0References1
Circl
Circl
•added 2024/12/30 1:48 p.m.•25 views

CVE-2024-54181

creationtimestamp| type| source ---|---|--- 2024-12-30 13:48:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113742088456394313 2024-12-30 15:57:53+00:00| seen| https://t.me/cvedetector/13933...

7.2CVSS4.8AI score0.01001EPSS
SaveExploits0References2
Circl
Circl
•added 2024/12/30 4:32 a.m.•15 views

CVE-2024-13039

creationtimestamp| type| source ---|---|--- 2024-12-30 04:32:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113739902063679070 2024-12-30 06:46:05+00:00| seen| https://t.me/cvedetector/13919...

8.8CVSS6.2AI score0.00592EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/12/30 3:31 a.m.•14 views

CVE-2024-13037 1000 Projects Attendance Tracking Management System report.php attendance_report sql injection

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been classified as critical. Affected is the function attendancereport of the file /admin/report.php. The manipulation of the argument courseid leads to sql injection. It is possible to launch the attack...

6.5CVSS7.4AI score0.00447EPSS
SaveExploits1References5
CVE
CVE
•added 2024/12/30 3:31 a.m.•76 views

CVE-2024-13037

CVE-2024-13037 affects 1000 Projects Attendance Tracking Management System v1.0, specifically the attendance_report function in /admin/report.php. The root cause is manipulation of the course_id parameter enabling SQL injection, with remote exploitability and public disclosure. Impact is high: po...

9.8CVSS6.8AI score0.00447EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2024/12/30 3:31 a.m.•40 views

CVE-2024-13037 1000 Projects Attendance Tracking Management System report.php attendance_report sql injection

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been classified as critical. Affected is the function attendancereport of the file /admin/report.php. The manipulation of the argument courseid leads to sql injection. It is possible to launch the attack...

6.5CVSS0.00447EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/30 12:00 a.m.•19 views

1000 Projects Attendance Tracking Management System 注入漏洞

1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Attendance Tracking Management System version 1.0, which stems from an incorrect operation of the courseid parameter that can...

9.8CVSS7AI score0.00447EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/30 12:00 a.m.•9 views

CVE-2024-13037: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been classified as critical. Affected is the function attendancereport of the file /admin/report.php. The manipulation of the argument courseid leads to sql injection. It is possible to launch the attack...

9.8CVSS5.5AI score0.00447EPSS
SaveExploits1References1
NVD
NVD
•added 2024/12/29 8:15 a.m.•39 views

CVE-2024-13005

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

9.8CVSS0.00716EPSS
SaveExploits1References5
Circl
Circl
•added 2024/12/29 7:35 a.m.•22 views

CVE-2024-13005

creationtimestamp| type| source ---|---|--- 2024-12-29 07:35:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113734957541914206 2024-12-29 08:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3legladbxah2k 2024-12-29 09:50:59+00:00| seen|...

9.8CVSS6.2AI score0.00716EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/12/29 7:31 a.m.•46 views

CVE-2024-13005 1000 Projects Attendance Tracking Management System attendance_action.php sql injection

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

6.5CVSS0.00716EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/12/29 7:31 a.m.•31 views

CVE-2024-13005 1000 Projects Attendance Tracking Management System attendance_action.php sql injection

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

6.5CVSS7.5AI score0.00716EPSS
SaveExploits1References5
CVE
CVE
•added 2024/12/29 7:31 a.m.•85 views

CVE-2024-13005

CVE-2024-13005 affects 1000 Projects Attendance Tracking Management System 1.0; the vulnerability is an SQL injection in /admin/attendance_action.php via the attendance_id parameter. Exploitation is remote and exploits have been disclosed. Multiple sources corroborate the issue and indicate high ...

9.8CVSS6.9AI score0.00716EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2024/12/29 12:00 a.m.•26 views

PT-2024-17865 · Unknown · 1000 Projects Attendance Tracking Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Attendance Tracking Management System version 1.0 Description: A critical issue was found in the 1000 Projects Attendance Tracking Management System. This issue affects the file /admin/attendance action.php and is related to the...

9.8CVSS7.3AI score0.00716EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/29 12:00 a.m.•9 views

CVE-2024-13005: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

9.8CVSS5.5AI score0.00716EPSS
SaveExploits1References1
Rows per page
Query Builder