Lucene search
+L

21 matches found

EUVD
EUVD
•added 2026/09/25 1:15 a.m.•7 views

EUVD-2026-86495

A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass...

6.9CVSS5.3AI score
SaveExploits0References6
CVE
CVE
•added 2026/09/25 1:15 a.m.•9 views

CVE-2026-97647

The ningzichun student-management-system (up to version 98760f5711cf6dc8b4adca53a9e207ca49b02ebf ) contains a security vulnerability in the user/editLog.php file. An attacker can perform a remote authorization bypass by manipulating specific arguments, including sid , addtime , type , reason , de...

6.9CVSS5.3AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/08/19 5:04 a.m.•14 views

CVE-2026-55984

A flaw was found in Gitea. An authenticated attacker could exploit a null pointer dereference within the AddTime API. This can lead to a denial of service DoS, making the application unavailable to legitimate users...

2.7CVSS5.5AI score0.00458EPSS
SaveExploits0References6
NVD
NVD
•added 2026/08/13 5:17 p.m.•12 views

CVE-2026-55984

Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...

2.7CVSS0.00458EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/13 4:44 p.m.•15 views

EUVD-2026-58139

Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...

5.7AI score0.00458EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/13 4:44 p.m.•56 views

CVE-2026-55984

Gitea is affected by a Null Pointer Dereference in the AddTime API , which can lead to an Authenticated Denial of Service . This vulnerability specifically impacts the gitea.dev component. Users are encouraged to upgrade to Gitea version v1.27.0 , which includes security fixes for this issue and ...

5.7AI score0.00458EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/13 4:44 p.m.•11 views

CVE-2026-55984 Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...

5.6AI score0.00458EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/13 4:44 p.m.•13 views

CVE-2026-55984 Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...

2.7CVSS5.4AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/13 4:44 p.m.•39 views

CVE-2026-55984 Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...

0.00458EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/08/11 12:04 a.m.•7 views

SUSE CVE-2026-55984

Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...

2.7CVSS5.6AI score0.00458EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/27 3:32 p.m.•12 views

GO-2026-6064 Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service in gitea.dev

Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service in gitea.dev...

5.8AI score0.00458EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/21 8:59 p.m.•8 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the AddTime when a non-existent user name is specified in the API request. An attacker can cause the application to panic and disrupt service availability by sending a crafted request with an invalid user nam...

5.1CVSS5.7AI score0.00458EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/21 8:59 p.m.•2 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the AddTime when a non-existent user name is specified in the API request. An attacker can cause the application to panic and disrupt service availability by sending a crafted request with an invalid user nam...

5.1CVSS5.6AI score0.00458EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-31472

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00478EPSS
SaveExploits1References6
CNVD
CNVD
•added 2025/09/29 12:00 a.m.•18 views

Simple Scheduling System addtime.php File SQL Injection Vulnerability

Simple Scheduling System is a simple scheduling system. Simple Scheduling System has a SQL injection vulnerability that originates from the starttime/endtime parameters in the /addtime.php file not being securely filtered. An attacker can exploit this vulnerability to execute malicious SQL comman...

9.8CVSS8.3AI score0.00478EPSS
SaveExploits1References1
OSV
OSV
•added 2025/09/28 7:15 p.m.•13 views

CVE-2025-11115

A vulnerability has been found in code-projects Simple Scheduling System 1.0. Affected by this issue is some unknown functionality of the file /addtime.php. The manipulation of the argument starttime/endtime leads to sql injection. Remote exploitation of the attack is possible. The exploit has be...

9.8CVSS5.6AI score0.00478EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/28 6:32 p.m.•10 views

CVE-2025-11115 code-projects Simple Scheduling System addtime.php sql injection

A vulnerability has been found in code-projects Simple Scheduling System 1.0. Affected by this issue is some unknown functionality of the file /addtime.php. The manipulation of the argument starttime/endtime leads to sql injection. Remote exploitation of the attack is possible. The exploit has be...

7.5CVSS6.6AI score0.00478EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/28 6:32 p.m.•63 views

CVE-2025-11115

CVE-2025-11115 affects Code-Projects Simple Scheduling System 1.0, with the flaw located in addtime.php where manipulating starttime/endtime triggers SQL injection. Remote exploitation is possible and public exploits have been disclosed. Multiple sources (NVD/NVDC/CNVD/Red Hat feed) corroborate t...

9.8CVSS6.6AI score0.00478EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2025/09/28 12:00 a.m.•16 views

Code-Projects Simple Scheduling System SQL注入漏洞

Simple Scheduling System is a simple scheduling system. Simple Scheduling System has a SQL injection vulnerability that originates from the starttime/endtime parameters in the /addtime.php file not being securely filtered. An attacker can exploit this vulnerability to execute malicious SQL comman...

9.8CVSS8.2AI score0.00478EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•20 views

PT-2025-39786

Name of the Vulnerable Software and Affected Versions Simple Scheduling System version 1.0 Description A flaw exists in an unknown functionality within the /addtime.php file. The manipulation of the starttime/endtime argument can lead to a SQL injection. Remote exploitation is possible. The explo...

9.8CVSS7.2AI score0.00478EPSS
SaveExploits1References10
Rows per page
Query Builder