Lucene search
+L

2713 matches found

CNVD
CNVD
added 2025/10/17 12:0 a.m.5 views

Rockwell Automation Comms-1783-NATR Cross-Site Scripting Vulnerability

Rockwell Automation Comms-1783-NATR is an industrial Ethernet address translation device from Rockwell Automation. The Rockwell Automation Comms-1783-NATR is vulnerable to a cross-site scripting vulnerability that is caused by improper validation of user-supplied input. An attacker could exploit...

8.5CVSS6.2AI score0.00244EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 12:42 p.m.8 views

CVE-2025-7329

A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation...

8.5CVSS5.5AI score0.00244EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2025/10/15 12:0 a.m.208 views

📄 PerfexCRM Authentication Bypass

PerfexCRM versions prior to 3.3.1 suffer from an authentication bypass vulnerability. Security Advisory — PerfexCRM Authentication Bypass CVE-2025-60375, RESERVED Advisory ID: perfexcrm-auth-bypass-2025 CVE: CVE-2025-60375 RESERVED Product: PerfexCRM Affected versions: versions prior to 3.3.1 3.3...

7.3CVSS7.1AI score0.00263EPSS
SaveExploits1
EUVD
EUVD
added 2025/10/14 3:31 p.m.7 views

EUVD-2025-34189

A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation...

8.5CVSS5.1AI score0.00244EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/14 1:15 p.m.9 views

CVE-2025-7329

A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation...

8.5CVSS0.00244EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/14 1:15 p.m.8 views

CVE-2025-7329

A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation...

4.8CVSS5.7AI score0.00244EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/14 12:37 p.m.12 views

CVE-2025-7329 Rockwell Automation Comms - 1783-NATR Stored Cross-Site Scripting Vulnerability

A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation...

8.5CVSS0.00244EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/14 12:37 p.m.4 views

CVE-2025-7329 Rockwell Automation Comms - 1783-NATR Stored Cross-Site Scripting Vulnerability

A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation...

8.5CVSS5.2AI score0.00244EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/14 12:37 p.m.22 views

CVE-2025-7329

CVE-2025-7329 describes a Stored Cross-Site Scripting vulnerability in Rockwell Automation Comms-1783-NATR (industrial Ethernet translation device). The issue arises from missing filtering/encoding of user input, allowing a logged-in administrator to update configuration fields and potentially vi...

8.5CVSS5.2AI score0.00244EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.7 views

PT-2025-41911

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A Stored Cross-Site Scripting issue exists that could allow a malicious user to view and modify sensitive data or make the webpage unavailable. The issue is due...

8.5CVSS5.4AI score0.00244EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.6 views

Rockwell Automation Comms-1783-NATR 安全漏洞

Rockwell Automation Comms-1783-NATR is an industrial Ethernet address translation device from Rockwell Automation. The Rockwell Automation Comms-1783-NATR is vulnerable to a cross-site scripting vulnerability that is caused by improper validation of user-supplied input. An attacker could exploit...

8.5CVSS5.9AI score0.00244EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/09 2:4 a.m.6 views

CVE-2025-11422

A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

9.8CVSS7AI score0.00479EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/08 8:19 p.m.5 views

CVE-2025-11118

A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...

9.8CVSS7AI score0.00441EPSS
SaveExploits1References1
NVD
NVD
added 2025/10/08 2:15 a.m.7 views

CVE-2025-11422

A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

9.8CVSS0.00479EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/08 2:15 a.m.6 views

CVE-2025-11422

A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

9.8CVSS5.8AI score0.00479EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/08 1:32 a.m.4 views

CVE-2025-11422 Campcodes Advanced Online Voting Management System login.php sql injection

A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

7.5CVSS6.8AI score0.00479EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/08 1:32 a.m.15 views

CVE-2025-11422 Campcodes Advanced Online Voting Management System login.php sql injection

A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...

7.5CVSS0.00479EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/08 1:32 a.m.22 views

CVE-2025-11422

The CVE-2025-11422 entry concerns Campcodes Advanced Online Voting Management System 1.0. The vulnerability is a SQL injection in an unknown function of /admin/login.php, triggered by manipulating the Username parameter. It is exploitable remotely and the exploit has been disclosed publicly. Seve...

9.8CVSS7.3AI score0.00479EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.9 views

PT-2025-41211

Name of the Vulnerable Software and Affected Versions Campcodes Advanced Online Voting Management System version 1.0 Description A flaw exists in Campcodes Advanced Online Voting Management System version 1.0 that could allow for remote code execution. The issue is related to a SQL injection...

9.8CVSS7.8AI score0.00479EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/10/08 12:0 a.m.10 views

CampCodes Advanced Online Voting Management System SQL注入漏洞

CampCodes Advanced Online Voting Management System is an advanced online voting management system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in CampCodes Advanced Online Voting Management System version 1.0, which stems from an incorrect manipulation of the parameter...

9.8CVSS7.8AI score0.00479EPSS
SaveExploits1References5
Rows per page
Query Builder