6685 matches found
CVE-2022-4891 Sisimai string.rb to_plain redos
A vulnerability has been found in Sisimai up to 4.25.14p11 and classified as problematic. This vulnerability affects the function toplain of the file lib/sisimai/string.rb. The manipulation leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be...
Cross site scripting
A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file index.php. The manipulation of the argument lang leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named...
Sql injection
A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes/user.js. The manipulation of the argument username/password leads to sql injection. The patch is named 68b9dc346e88b494df00d88c7d058e96820e1479. It is...
CVE-2015-10051 bony2023 Discussion-Board main.php display_all_replies sql injection
A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...
CVE-2015-10048 bmattoso desafio_buzz_woody sql injection
A vulnerability was found in bmattoso desafiobuzzwoody. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identifier of the patch is cb8220cbae06082c969b1776fcb2fdafb3a1006b. It is recommended to apply a patch to fix this issue...
CVE-2022-4379
creationtimestamp| type| source ---|---|--- 2023-01-11 00:29:03+00:00| seen| https://t.me/cibsecurity/56269...
编号撤回
This CVE number has been withdrawn...
编号撤回
This CVE number has been withdrawn...
编号撤回
This CVE number has been withdrawn...
编号撤回
This CVE number has been withdrawn...
CVE-2021-4307 Yomguithereal Baobab prototype pollution
A vulnerability was found in Yomguithereal Baobab up to 2.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack can be launche...
Sql injection
UNSUPPORTED WHEN ASSIGNED A vulnerability was found in forcedotcom SalesforceMobileSDK-Windows up to 4.x. It has been rated as critical. This issue affects the function ComputeCountSql of the file SalesforceSDK/SmartStore/Store/QuerySpec.cs. The manipulation leads to sql injection. Upgrading to...
CVE-2015-10024 hoffie larasync file_storage.go path traversal
A vulnerability classified as critical was found in hoffie larasync. This vulnerability affects unknown code of the file repository/content/filestorage.go. The manipulation leads to path traversal. The name of the patch is 776bad422f4bd4930d09491711246bbeb1be9ba5. It is recommended to apply a pat...
CVE-2014-125053
creationtimestamp| type| source ---|---|--- 2023-01-07 02:25:19+00:00| seen| https://t.me/cibsecurity/56088...
CVE-2022-44536
creationtimestamp| type| source ---|---|--- 2023-01-06 02:19:23+00:00| seen| https://t.me/cibsecurity/56028...
CVE-2022-37933
creationtimestamp| type| source ---|---|--- 2023-01-05 12:23:44+00:00| seen| https://t.me/cibsecurity/55936 2025-04-10 15:48:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11248...
CVE-2022-46335
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
编号撤回
This CVE number has been withdrawn...
Cross site scripting
A vulnerability was found in slackero phpwcms up to 1.9.26. It has been classified as problematic. This affects an unknown part of the component SVG File Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.9.27 is able to...