86 matches found
CVE-2024-12488 code-projects Online Class and Exam Scheduling System subject_update.php sql injection
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subjectupdate.php. The manipulation of the argument id leads to sql injection. The attack may be launched...
CVE-2024-12486
CVE-2024-12486 affects Code-Projects Online Class and Exam Scheduling System 1.0. The vulnerability is in the file /pages/rank_update.php where the parameter id is not properly validated, leading to a SQL injection. The flaw is exploitable remotely, and an exploit has been disclosed publicly. The...
CVE-2024-12485 code-projects Online Class and Exam Scheduling System department.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...
CVE-2024-43449 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
CVE-2024-43643 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
...
CVE-2024-43643
CVE-2024-43643 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The vulnerability pertains to the Windows USB Video Driver component and is categorized with CVSSv3.1 vektor: physical attack, low complexity, no privileges required, no user interaction, and impacts t...
CVE-2024-43637
CVE-2024-43637 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The connected documents confirm a Windows USB Video Driver entry and indicate that Microsoft patched this family of flaws in November 2024 updates (e.g., KB5046616/OS Build 20348.2849 and related KBs)....
PT-2024-38681 · Sourcecodester · Yoga Class Registration System
Name of the Vulnerable Software and Affected Versions: SourceCodester Yoga Class Registration System version 1.0 Description: A problematic vulnerability has been found in the system, affecting an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the address...
CVE-2024-7851
A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the component Add User Handler. The manipulation leads to improper authorization. The attack can be...
KLA67433 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...
CVE-2024-21434 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
...
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
...
Microsoft Windows Multiple Vulnerabilities (KB5028182)
This host is missing an important security update according to Microsoft KB5028182 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
The vulnerability of the USB Audio Class System driver for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the USB Audio Class System driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Windows Multiple Vulnerabilities (KB5028169)
This host is missing an important security update according to Microsoft KB5028169 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2023-1722
Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators...
CVE-2023-29626
Yoga Class Registration System 1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at /admin/login.php...
CVE-2023-0981
A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. Affected is an unknown function of the component Delete User. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...
SourceCodester Yoga Class Registration System SQL注入漏洞
Yoga Class Registration System is a yoga class registration system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Yoga Class Registration System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...
SourceCodester Yoga Class Registration System SQL注入漏洞
Yoga Class Registration System is a yoga class registration system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Yoga Class Registration System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...