Lucene search
+L

154 matches found

OSV
OSV
•added 2025/05/03 7:15 p.m.•20 views

CVE-2025-4242

A vulnerability classified as critical was found in PHPGurukul Online Birth Certificate System 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/between-dates-report.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched...

9.8CVSS5.8AI score0.00396EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/03 12:00 a.m.•14 views

PHPGurukul Online Birth Certificate System 注入漏洞

Online Birth Certificate System is an online birth certificate system. Online Birth Certificate System is vulnerable to a SQL injection vulnerability that stems from incorrect manipulation of the parameter fromdate in the file /admin/between-dates-report.php resulting in SQL injection. No details...

9.8CVSS7.9AI score0.00396EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/03 12:00 a.m.•1 views

CVE-2025-4242: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Online Birth Certificate System 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/between-dates-report.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched...

9.8CVSS6.9AI score0.00396EPSS
SaveExploits1References1
Snyk
Snyk
•added 2025/03/24 9:30 p.m.•10 views

Improper Preservation of Consistency Between Independent Representations of Shared State

Overview Affected versions of this package are vulnerable to Improper Preservation of Consistency Between Independent Representations of Shared State which can result in two different OpenFlowNodeIds being assigned to the same SFF by different plugins. An attacker can trigger such a name conflict...

8.7CVSS6.9AI score0.00393EPSS
SaveExploits0References2
OSV
OSV
•added 2025/03/12 4:43 a.m.•6 views

CVE-2025-24912

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail...

3.7CVSS5.8AI score
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2025/03/12 4:43 a.m.•26 views

CVE-2025-24912

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail...

3.7CVSS6.9AI score0.00775EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a PCM buffermutex and mmaplock potential AB/BA deadlock...

5.5CVSS5.5AI score0.00204EPSS
SaveExploits0References9
NVD
NVD
•added 2024/11/26 2:15 p.m.•40 views

CVE-2024-9928

A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts. If exploited, this could cause account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the equipment login. Note that the system supports onl...

5.3CVSS0.00394EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/26 1:26 p.m.•31 views

CVE-2024-9928

A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts. If exploited, this could cause account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the equipment login. Note that the system supports onl...

5.3CVSS0.00394EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/26 12:00 a.m.•20 views

PT-2024-39943 · Nsd570 · Nsd570

Name of the Vulnerable Software and Affected Versions: NSD570 affected versions not specified Description: A vulnerability exists in the login panel of NSD570 that does not restrict excessive authentication attempts. If exploited, this could cause account takeover and unauthorized access to the...

5.3CVSS7.1AI score0.00394EPSS
SaveExploits0References3
OSV
OSV
•added 2024/11/20 4:15 p.m.•15 views

CVE-2024-11487

A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /decoration/admin/btndatesreport.php of the component Between Dates Reports. The manipulation of the argument fromdate/todate leads to sql...

8.8CVSS5.7AI score0.00421EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/11/20 4:00 p.m.•17 views

CVE-2024-11487 Code4Berry Decoration Management System Between Dates Reports btndates_report.php sql injection

A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /decoration/admin/btndatesreport.php of the component Between Dates Reports. The manipulation of the argument fromdate/todate leads to sql...

6.5CVSS7.3AI score0.00421EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/11/20 4:00 p.m.•63 views

CVE-2024-11487 Code4Berry Decoration Management System Between Dates Reports btndates_report.php sql injection

A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /decoration/admin/btndatesreport.php of the component Between Dates Reports. The manipulation of the argument fromdate/todate leads to sql...

6.5CVSS0.00421EPSS
SaveExploits0References3
CVE
CVE
•added 2024/11/20 4:00 p.m.•70 views

CVE-2024-11487

CVE-2024-11487 affects Code4Berry Decoration Management System 1.0, specifically the file /decoration/admin/btndates_report.php within the Between Dates Reports component. The vulnerability arises from improper handling of the fromdate/todate parameters, enabling SQL injection. Exploitation can b...

8.8CVSS7.1AI score0.00421EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/20 12:00 a.m.•4 views

CVE-2024-11487: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /decoration/admin/btndatesreport.php of the component Between Dates Reports. The manipulation of the argument fromdate/todate leads to sql...

8.8CVSS6.3AI score0.00421EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/22 5:15 p.m.•13 views

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

7.5CVSS5.8AI score0.00509EPSS
SaveExploits1References1
NVD
NVD
•added 2024/10/22 5:15 p.m.•33 views

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

7.5CVSS0.00509EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/22 12:00 a.m.•10 views

Client Management System SQL注入漏洞

Client Management System is a system for managing customer relationships by an individual Indian developer Haneen Gufran. A security vulnerability exists in Client Management System version 1.0 that originates from SQL injection in the Between Dates Reports parameter of the...

7.5CVSS7.9AI score0.00509EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/10/22 12:00 a.m.•26 views

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

0.00509EPSS
SaveExploits1References1
CVE
CVE
•added 2024/10/22 12:00 a.m.•70 views

CVE-2024-48570

CVE-2024-48570 affects Client Management System 1.0. A SQL injection vulnerability exists in the Between Dates Reports parameter of the /admin/bwdates-reports-ds.php endpoint. The CVSS 3.1 base score is 7.5 (High) with Confidentiality impact High; no integrity/availability impact described. Conne...

7.5CVSS5.8AI score0.00509EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder