Lucene search
+L

137 matches found

OSV
OSV
added 2025/11/17 7:16 p.m.7 views

CVE-2024-46335

PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting XSS via the fromdate and todate parameters in between-date-userreport.php...

4.6CVSS5.8AI score0.00197EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/17 7:16 p.m.5 views

CVE-2024-46335

PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting XSS via the fromdate and todate parameters in between-date-userreport.php...

4.6CVSS0.00197EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/17 6:15 p.m.7 views

CVE-2024-44657

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php...

6.5CVSS5.8AI score0.00235EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.9 views

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the fromdate and todate parameters in between-date-userreport.php, whic...

4.6CVSS6.2AI score0.00197EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/11/17 12:0 a.m.3 views

CVE-2024-46335

PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting XSS via the fromdate and todate parameters in between-date-userreport.php...

5.8AI score0.00197EPSS
SaveExploits1References2
CVE
CVE
added 2025/11/17 12:0 a.m.18 views

CVE-2024-44657

PHPGurukul Complaint Management System 2.0 is affected by a SQL Injection vulnerability in the between-date-userreport.php file, caused by lack of validation for the fromdate and todate parameters. The root cause is unsanitized input that can allow unauthorized SQL execution and data access/modif...

6.5CVSS7.6AI score0.00235EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/11/17 12:0 a.m.14 views

CVE-2024-46335

PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting XSS via the fromdate and todate parameters in between-date-userreport.php...

0.00197EPSS
SaveExploits1References2
CVE
CVE
added 2025/11/17 12:0 a.m.15 views

CVE-2024-46335

PHPGurukul Complaint Management System 2.0 is vulnerable to Cross-Site Scripting (XSS) in the between-date-userreport.php script, via the fromdate and todate parameters. The root cause, as described across multiple reports, is lack of proper filtering/escaping of user-supplied data, enabling inje...

4.6CVSS5.8AI score0.00197EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/17 12:0 a.m.2 views

CVE-2024-44657

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php...

7.6AI score0.00235EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.5 views

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the fromdate and todate parameters in between-date-userreport.php. An attacker can...

6.5CVSS8.2AI score0.00235EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/11/17 12:0 a.m.6 views

EUVD-2024-55096

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php...

6.5CVSS7.5AI score0.00235EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/11/17 12:0 a.m.12 views

CVE-2024-44657

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php...

0.00235EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.6 views

PT-2025-47196

Name of the Vulnerable Software and Affected Versions PHPGurukul Complaint Management System version 2.0 Description The software is susceptible to a Cross Site Scripting XSS issue. This flaw is located in the between-date-userreport.php script and affects the fromdate and todate parameters...

4.6CVSS6AI score0.00197EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/11/07 10:59 p.m.5 views

EUVD-2025-38214

KubeVirt is a virtual machine management add-on for Kubernetes. In 1.5.0 and earlier, the permissions granted to the virt-handler service account, such as the ability to update VMI and patch nodes, could be abused to force a VMI migration to an attacker-controlled node. This vulnerability could...

6.9CVSS6.3AI score0.00254EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/11/04 1:15 a.m.4 views

CVE-2025-43449

The issue was addressed with improved handling of caches. This issue is fixed in iOS 26.1 and iPadOS 26.1. A malicious app may be able to track users between installs...

5.7AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.6 views

PT-2025-44883

The issue was addressed with improved handling of caches. This issue is fixed in iOS 26.1 and iPadOS 26.1. A malicious app may be able to track users between installs...

7.5CVSS6.1AI score0.00411EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/28 7:29 p.m.17 views

CVE-2025-27093 Sliver does not restricted traffic between Wireguard clients.

Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially...

6.3CVSS0.00222EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-25096

Malicious code in bioql PyPI...

6.3AI score0.00156EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/09/07 5:39 p.m.18 views

CVE-2025-9999

Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unauthorized commands in the application...

7.6CVSS7.3AI score0.00149EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.5 views

Malicious code in darkness-curious-between (npm)

The package darkness-curious-between was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder