Lucene search
+L

6111 matches found

CNNVD
CNNVD
added 2026/01/07 12:00 a.m.11 views

House Rental and Property Listing 安全漏洞

House Rental and Property Listing is a system developed in PHP, JavaScript, Bootstrap, CSS and MySQL database. It makes it easy for users to find the right house or property for rent. A security vulnerability exists in House Rental and Property Listing version 1.0, which stems from incorrect...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/01/06 11:28 a.m.21 views

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code...

8.1CVSS5.9AI score0.00432EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/06 12:00 a.m.23 views

PT-2026-1524

Name of the Vulnerable Software and Affected Versions projectworlds House Rental and Property Listing version 1.0 Description A flaw exists in projectworlds House Rental and Property Listing that allows for cross site scripting. The issue is related to the processing of the /app/complaint.php fil...

4.8CVSS5.3AI score0.00216EPSS
SaveExploits1References8
EUVD
EUVD
added 2026/01/05 8:32 p.m.10 views

EUVD-2026-0798

A security vulnerability has been detected in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Such manipulation of the argument username/password leads to sql injection. The attack may be performed from remote. The exploit ha...

7.5CVSS7.1AI score0.00394EPSS
SaveExploits1References8
OSV
OSV
added 2026/01/05 8:25 p.m.6 views

GHSA-6G8Q-HP2J-GVWV Harvest May Expose OS Default SSH Login Password Via SUSE Virtualization Interactive Installer

Impact Projects using the SUSE Virtualization Harvester environment are vulnerable to this exploit if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is utiliz...

9.8CVSS6.9AI score0.00481EPSS
SaveExploits0References4
NVD
NVD
added 2026/01/05 1:15 p.m.15 views

CVE-2026-0590

A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file /app/checkout/delete.php of the component POST Parameter Handler. This manipulation of the argument ID causes sql injection. It is possible to initiate th...

9.8CVSS0.00328EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2026/01/05 10:21 a.m.41 views

CVE-2025-30633 WordPress Amazon Native Shopping Recommendations Plugin <= 1.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Amazon Native Shopping Recommendations allows SQL Injection.This issue affects Amazon Native Shopping Recommendations: from n/a through 1.3...

9.3CVSS0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/05 12:00 a.m.9 views

Code-Projects Online Product Reservation System 代码注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. A code injection vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which stems from an incorrect manipulation of the parameter cat in the file...

6.1CVSS4.9AI score0.00325EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/05 12:00 a.m.22 views

PT-2026-1278

Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A flaw exists in code-projects Online Product Reservation System 1.0 that allows for SQL injection. The issue is located in an unknown function within the...

9.8CVSS7.5AI score0.00328EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2026/01/05 12:00 a.m.16 views

PT-2026-1238

Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A security flaw exists in code-projects Online Product Reservation System version 1.0. The issue is located in the file app/user/login.php within the User Login component...

9.8CVSS6.9AI score0.00394EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2026/01/05 12:00 a.m.13 views

Code-Projects Online Product Reservation System 授权问题漏洞

Code-Projects Online Product Reservation System is an open source online product reservation system from Code-Projects. An authorization issue vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which originates from an attacker being able to remotely bypass...

7.5CVSS7.4AI score0.00526EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/01/05 12:00 a.m.22 views

PT-2026-1333

Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0 Description A security issue exists in code-projects Online Music Site 1.0 related to SQL injection. The issue is present in the /login.php file and involves manipulation of the username and password...

7.5CVSS6.7AI score0.00394EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2026/01/04 12:00 a.m.9 views

Code-Projects Online Product Reservation System SQL注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. A SQL injection vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which originates from the incorrect operation of the parameter ID in the file...

9.8CVSS7.7AI score0.00485EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2026/01/03 10:04 a.m.25 views

CVE-2026-0546

A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unknown function of the file search.php. This manipulation of the argument Value causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may ...

7.5CVSS7AI score0.00423EPSS
SaveExploits1References1
NVD
NVD
added 2026/01/02 2:15 p.m.11 views

CVE-2026-0565

A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Executing a manipulation of the argument del can lead to sql injection. The attack can be executed remotely. The exploit has been made available...

9.8CVSS0.00346EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/01/02 9:35 a.m.20 views

CVE-2026-0544

A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public an...

9.8CVSS7.4AI score0.00346EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/01/02 12:00 a.m.24 views

PT-2026-1114

Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0 Description A flaw exists in code-projects Online Music Site version 1.0 that allows for SQL injection. The issue is located in the /Frontend/ViewSongs.php file, specifically through manipulation of...

7.5CVSS7.4AI score0.00346EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2026/01/02 12:00 a.m.12 views

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is an open source online music site by Code-Projects. A SQL injection vulnerability exists in Code-Projects Online Music Site version 1.0, which stems from incorrect manipulation of the parameter ID in the file /Frontend/ViewSongs.php, which could lead to a SQL...

9.8CVSS7.6AI score0.00346EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2026/01/01 6:25 a.m.12 views

CVE-2025-49342

Cross-Site Request Forgery CSRF vulnerability in merzedes Custom Style custom-style allows Stored XSS.This issue affects Custom Style: from n/a through = 1.0...

7.1CVSS5.9AI score0.001EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/01 5:16 a.m.25 views

CVE-2025-69413

In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists...

5.3CVSS0.0037EPSS
SaveExploits0References4
Rows per page
Query Builder