Lucene search
+L

1206 matches found

NVD
NVD
added 2025/09/18 1:15 p.m.14 views

CVE-2025-10666

A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnerability is the function sub4106d4 of the file apply.cgi. The manipulation of the argument countdowntime results in buffer overflow. The attack can be executed remotely. The exploit has been released to the...

9.8CVSS0.03039EPSS
SaveExploits3References7
Positive Technologies
Positive Technologies
added 2025/09/06 12:0 a.m.8 views

PT-2025-36392

openSUSE Advisory: libsoup vulnerability CVE-2025-03091 patched. Severity: LOW. Impact: Local DoS. Action: Run sudo zypper update. Read more: 👉 https://t.co/JNYgziZl5i https://t.co/pM5GPVIlzo...

7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:18 p.m.7 views

CVE-2025-34520

An authentication bypass vulnerability in Arcserve Unified Data Protection UDP allows unauthenticated attackers to gain unauthorized access to protected functionality or user accounts. By manipulating specific request parameters or exploiting a logic flaw, an attacker can bypass login mechanisms...

9.8CVSS7.2AI score0.00369EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-17434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A SIGFPE signal is raised in the function applyfilters of h5repackfilters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF...

6.5CVSS7.1AI score0.01972EPSS
SaveExploits1References2
NCSC
NCSC
added 2025/08/29 8:37 a.m.7 views

Vulnerability fixed in FreePBX

FreePBX has fixed a vulnerability in versions 15, 16 and 17. The vulnerability allows attackers to gain unauthorized access and potentially execute remote code by exploiting a validation and remediation error in the processing of user-supplied input, such as in the "endpoint" module. FreePBX...

10CVSS7.9AI score0.88269EPSS
SaveExploits23References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/22 11:15 a.m.7 views

Security Bulletin: IBM App Connect for Healthcare is vulnerable to multiple vulnerabilities due to Apache Commons Lang & FileUpload ( CVE-2025-48924 & CVE-2025-48976 )

Summary IBM App Connect for Healthcare is vulnerable to multiple vulnerabilities due to Apache Commons Lang & Apache Commons FileUpload. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang:...

7.5CVSS9.6AI score0.67267EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2025/08/20 12:0 a.m.14 views

Job Diary user-apply.php file SQL Injection Vulnerability

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter jobtitle in the file /user-apply.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

9.8CVSS8.3AI score0.00444EPSS
SaveExploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/18 11:32 a.m.8 views

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM DevOps Code ClearCase (CVE-2025-36097, CVE-2024-56339)

Summary IBM WebSphere Application Server WAS is shipped as a component of IBM DevOps Code ClearCase. Information about security vulnerabilities affecting WAS have been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

7.5CVSS7.4AI score0.004EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/15 6:31 p.m.22 views

CVE-2025-8921

A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument jobtitle leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and...

9.8CVSS7.7AI score0.00444EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in npm-apply (npm)

The package npm-apply was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-27825 Malicious code in npm-apply (npm)

The package npm-apply was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/13 6:15 p.m.6 views

CVE-2025-8921

A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument jobtitle leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and...

9.8CVSS5.7AI score0.00444EPSS
SaveExploits1References5
NVD
NVD
added 2025/08/13 6:15 p.m.12 views

CVE-2025-8921

A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument jobtitle leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and...

9.8CVSS0.00444EPSS
SaveExploits1References5
CVE
CVE
added 2025/08/13 6:2 p.m.28 views

CVE-2025-8921

Code-Projects Job Diary 1.0 is affected by a SQL injection in /user-apply.php via the job_title parameter. Several connected documents confirm remote exploitation and public disclosure of the exploit. The exact vulnerable functionality is unknown beyond that the issue arises in /user-apply.php. R...

9.8CVSS7.6AI score0.00444EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/13 6:2 p.m.4 views

CVE-2025-8921 code-projects Job Diary user-apply.php sql injection

A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument jobtitle leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and...

7.5CVSS7.6AI score0.00444EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/08/13 6:2 p.m.18 views

CVE-2025-8921 code-projects Job Diary user-apply.php sql injection

A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument jobtitle leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and...

7.5CVSS0.00444EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/08/13 12:0 a.m.16 views

PT-2025-33064 · Code Projects · Job Diary

Name of the Vulnerable Software and Affected Versions: code-projects Job Diary version 1.0 Description: A SQL injection issue exists in code-projects Job Diary 1.0. The vulnerability affects an unknown functionality within the /user-apply.php file. Manipulation of the job title argument can lead ...

9.8CVSS7.4AI score0.00444EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/08/13 12:0 a.m.7 views

Code-Projects Job Diary 注入漏洞

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter jobtitle in the file /user-apply.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

9.8CVSS8.2AI score0.00444EPSS
SaveExploits1References5
ICS
ICS
added 2025/08/12 12:0 a.m.10 views

Siemens SICAM Q100/Q200

SUMMARY SICAM Q100 and Q200 devices are affected by two information disclosure vulnerabilities that could allow an authenticated local attacker to extract the SMTP account password and use the configured SMTP service for arbitrary purposes. Siemens has released new versions for the affected...

7.2AI score
SaveExploits0References10
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/11 1:11 p.m.4 views

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2025-36097)

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

7.5CVSS6.9AI score0.00399EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder