Lucene search
K

15492 matches found

CVE
CVE
added 2024/03/01 3:31 p.m.71 views

CVE-2024-2068

CVE-2024-2068 affects SourceCodester Computer Inventory System 1.0. The vulnerability is a cross-site scripting issue in the endpoint /endpoint/update-computer.php triggered by manipulating the model parameter, with remote attack potential. Multiple sources confirm the flaw and its public disclos...

6.1CVSS4AI score0.02532EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/03/01 3:15 p.m.3 views

CVE-2024-2067

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. T...

9.8CVSS5.8AI score0.00481EPSS
Exploits0References3
NVD
NVD
added 2024/03/01 3:15 p.m.13 views

CVE-2024-2067

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. T...

9.8CVSS6.8AI score0.00481EPSS
Exploits0References3
OSV
OSV
added 2024/03/01 3:15 p.m.2 views

CVE-2024-2066

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS3.8AI score0.00385EPSS
Exploits0References3
Prion
Prion
added 2024/03/01 3:15 p.m.13 views

Sql injection

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. T...

6.5CVSS7.8AI score0.00481EPSS
Exploits0References3
Prion
Prion
added 2024/03/01 3:15 p.m.14 views

Cross site scripting

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack...

3.3CVSS6.4AI score0.00385EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/03/01 3:0 p.m.10 views

CVE-2024-2067 SourceCodester Computer Inventory System delete-computer.php sql injection

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. T...

6.5CVSS7.8AI score0.00481EPSS
Exploits0References3
CVE
CVE
added 2024/03/01 3:0 p.m.62 views

CVE-2024-2067

SourceCodester Computer Inventory System 1.0 has a SQL injection vulnerability in /endpoint/delete-computer.php triggered by manipulating the computer parameter. The flaw is exploitable remotely and is considered critical by CVE-2024-2067; multiple sources report the exploit publicly. No official...

9.8CVSS6.9AI score0.00481EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/03/01 2:31 p.m.17 views

CVE-2024-2066 SourceCodester Computer Inventory System add-computer.php cross site scripting

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack...

3.3CVSS3.8AI score0.00385EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/03/01 2:31 p.m.8 views

CVE-2024-2066 SourceCodester Computer Inventory System add-computer.php cross site scripting

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack...

3.3CVSS6.2AI score0.00385EPSS
Exploits0References3
CVE
CVE
added 2024/03/01 2:31 p.m.73 views

CVE-2024-2066

CVE-2024-2066 affects SourceCodester Computer Inventory System 1.0, with a Cross-Site Scripting (XSS) flaw in /endpoint/add-computer.php triggered via the model argument. The root cause is input manipulation that leads to XSS, allowing remote initiation. Several connected sources confirm the vuln...

6.1CVSS3.8AI score0.00385EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2024/03/01 12:0 a.m.2 views

Computer Inventory System SQL Injection Vulnerability

Computer Inventory System is a computer inventory system by rems individual developers. A SQL injection vulnerability exists in Computer Inventory System version 1.0, which stems from an SQL injection issue in the /endpoint/delete-computer.php file...

9.8CVSS8AI score0.00481EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/03/01 12:0 a.m.2 views

Computer Inventory System Cross-Site Scripting Vulnerability

Computer Inventory System is a computer inventory system for rems individual developers. A cross-site scripting vulnerability exists in Computer Inventory System version 1.0, which stems from a cross-site scripting issue in the /endpoint/update-computer.php file...

6.1CVSS6.2AI score0.02532EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/03/01 12:0 a.m.24 views

Dell BIOS Security Vulnerability

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS that stems from the inclusion of an incorrect null termination vulnerability...

6.8CVSS6.8AI score0.00493EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/03/01 12:0 a.m.5 views

PT-2024-18691 · Sourcecodester · Sourcecodester Computer Inventory System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Inventory System version 1.0 Description: A problematic issue has been found in the system, affecting the file /endpoint/add-computer.php. The manipulation of the model argument leads to cross-site scripting. This issu...

6.1CVSS4AI score0.00385EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/03/01 12:0 a.m.3 views

Computer Inventory System Cross-Site Scripting Vulnerability

Computer Inventory System is a computer inventory system for rems individual developers. A cross-site scripting vulnerability exists in Computer Inventory System version 1.0, which stems from a cross-site scripting issue in the /endpoint/add-computer.php file...

6.1CVSS6.2AI score0.00385EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/03/01 12:0 a.m.5 views

PT-2024-18693 · Sourcecodester · Sourcecodester Computer Inventory System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Inventory System version 1.0 Description: A problem was found in the processing of the file /endpoint/update-computer.php. The manipulation of the model argument leads to cross-site scripting. The attack can be initiat...

6.1CVSS4.3AI score0.02532EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/03/01 12:0 a.m.3 views

PT-2024-18692 · Sourcecodester · Sourcecodester Computer Inventory System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Inventory System version 1.0 Description: A critical issue has been identified, affecting the /endpoint/delete-computer.php file. The manipulation of the computer argument leads to SQL injection. This issue can be...

9.8CVSS7.3AI score0.00481EPSS
Exploits0References7
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/02/29 11:6 a.m.2 views

Malicious code in tokenspair (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ccf75851f35b0d70ab977246300e05d579dafe5efa919e96448054ea7c3c7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2024/02/27 7:35 a.m.5 views

MAL-2024-1040 Malicious code in emilkylandertestnpmpackge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd319ba7b8c79bd32d0502d11aaf6fe6a8689e11b814d211d891de83981fc6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Rows per page
Query Builder