Lucene search
+L

11930 matches found

CVE
CVE
added 2025/04/20 4:00 a.m.79 views

CVE-2025-3821

CVE-2025-3821 affects SourceCodester Web-based Pharmacy Product Management System 1.0. The vulnerability resides in add-admin.php, where improper handling of the inputs txtpassword, txtfullname, and txtemail enables cross-site scripting. The issue is exploitable remotely and has public exploits. ...

5.4CVSS3.5AI score0.00353EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/04/20 12:00 a.m.9 views

SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞

SourceCodester Web-based Pharmacy Product Management System is SourceCodester open source a Web-based pharmacy product management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which results from incorrect...

5.4CVSS4.1AI score0.00353EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/04/20 12:00 a.m.10 views

SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞

SourceCodester Web-based Pharmacy Product Management System is SourceCodester open source a Web-based pharmacy product management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which originates from cross-site...

4.8CVSS4.1AI score0.00379EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/04/20 12:00 a.m.12 views

SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source Web-based pharmacy product management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which is caused by incorrect...

4.8CVSS4.2AI score0.00379EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/04/20 12:00 a.m.19 views

PT-2025-17405 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Web-based Pharmacy Product Management System. The issue affects an unknown function of the file...

4.8CVSS3.5AI score0.00394EPSS
SaveExploits1References17
CNNVD
CNNVD
added 2025/04/20 12:00 a.m.15 views

SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞

SourceCodester Web-based Pharmacy Product Management System is SourceCodester open source a Web-based pharmacy product management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which is caused by an error in the...

4.8CVSS4.3AI score0.00394EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/04/20 12:00 a.m.14 views

SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞

SourceCodester Web-based Pharmacy Product Management System is SourceCodester open source a Web-based pharmacy product management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System due to cross-site scripting as a result...

4.8CVSS4.1AI score0.00379EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/04/20 12:00 a.m.16 views

PT-2025-17406 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Web-based Pharmacy Product Management System. The issue affects an unknown functionality of the...

4.8CVSS3.5AI score0.00379EPSS
SaveExploits1References10
SUSE CVE
SUSE CVE
added 2025/04/18 11:20 p.m.11 views

SUSE CVE-2025-22039

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix overflow in dacloffset bounds check The dacloffset field was originally typed as int and used in an unchecked addition, which could overflow and bypass the existing bounds check in both smbcheckpermdacl and...

8.8CVSS7.7AI score0.0068EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/18 6:15 a.m.24 views

CVE-2025-3783

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...

9.8CVSS5.5AI score0.00889EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/04/18 5:31 a.m.9 views

CVE-2025-3783 SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...

6.5CVSS7.2AI score0.00889EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/04/18 12:00 a.m.15 views

SourceCodester Web-based Pharmacy Product Management System 安全漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source Web-based pharmacy product management system. A security vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which is caused by an unrestricted upload du...

9.8CVSS6.5AI score0.00889EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/04/17 11:20 p.m.12 views

CVE-2025-24315

Unauthenticated attackers can add devices of other users to their scenes or arbitrary scenes of other arbitrary users...

6.9CVSS7.1AI score0.0061EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/17 10:15 p.m.10 views

CVE-2025-29460

An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Add Mycode function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation...

7.6CVSS5.8AI score0.0035EPSS
SaveExploits0References2
NVD
NVD
added 2025/04/17 4:15 p.m.7 views

CVE-2025-39423

Cross-Site Request Forgery CSRF vulnerability in Jenst Add to Header add-to-header allows Stored XSS.This issue affects Add to Header: from n/a through = 1.0...

7.1CVSS0.00143EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/17 3:47 p.m.20 views

CVE-2025-32593 WordPress Add Product Frontend for WooCommerce plugin <= 1.0.8 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Bytes Technolab Add Product Frontend for WooCommerce add-product-frontend-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Product Frontend for WooCommerce: from n/a through = 1.0.8...

8.2CVSS0.0039EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/17 3:17 p.m.23 views

CVE-2025-39423 WordPress Add to Header plugin <= 1.0 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jenst Add to Header add-to-header allows Stored XSS.This issue affects Add to Header: from n/a through = 1.0...

7.1CVSS0.00143EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/17 3:17 p.m.53 views

CVE-2025-39423

CVE-2025-39423 describes a CSRF-to-Stored-XSS vulnerability in the WordPress plugin “Add to Header” (versions n/a through 1.0). Multiple sources (NVD, CVE list, Patchstack, CNNVD, PT Security) confirm the issue and its impact as stored XSS enabled via CSRF. Exploitation would require user interac...

7.1CVSS7.2AI score0.00143EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:17 p.m.6 views

CVE-2025-39423 WordPress Add to Header plugin <= 1.0 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jenst Add to Header add-to-header allows Stored XSS.This issue affects Add to Header: from n/a through = 1.0...

7.1CVSS8.6AI score0.00143EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/17 10:29 a.m.7 views

WordPress Add to Header plugin <= 1.0 - CSRF to XSS vulnerability

CSRF to XSS vulnerability discovered by johska Patchstack Alliance in WordPress Plugin Add to Header versions = 1.0...

7.1CVSS7.9AI score0.00143EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder