Lucene search
+L

9330 matches found

Cvelist
Cvelist
•added 2026/01/01 6:02 p.m.•52 views

CVE-2025-15408 code-projects Online Guitar Store Create_product.php sql injection

A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Createproduct.php. Performing a manipulation of the argument dretitle results in sql injection. The attack is possible to be carried out remotely. The exploit has been made publi...

7.5CVSS0.00383EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/01/01 6:02 p.m.•28 views

EUVD-2026-0011

A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Createproduct.php. Performing manipulation of the argument dretitle results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public...

7.5CVSS7.1AI score0.00383EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2026/01/01 6:02 p.m.•12 views

CVE-2025-15408 code-projects Online Guitar Store Create_product.php sql injection

A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Createproduct.php. Performing a manipulation of the argument dretitle results in sql injection. The attack is possible to be carried out remotely. The exploit has been made publi...

7.5CVSS7.1AI score0.00383EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/01/01 6:02 p.m.•13 views

CVE-2025-15408

A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Createproduct.php. Performing a manipulation of the argument dretitle results in sql injection. The attack is possible to be carried out remotely. The exploit has been made publi...

9.8CVSS7.1AI score0.00383EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/01/01 6:02 p.m.•46 views

CVE-2025-15408

CVE-2025-15408 affects code-projects Online Guitar Store 1.0. The vulnerability is a SQL injection in /admin/Create_product.php via the dre_title parameter. Exploitation is possible remotely and the exploit has been publicly released. Connected documents confirm the root cause (unsafely processed...

9.8CVSS7.1AI score0.00383EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/01/01 5:32 p.m.•46 views

CVE-2025-15407

CVE-2025-15407 affects code-projects Online Guitar Store 1.0. The vulnerability is a SQL injection in an unknown function of the file /admin/Create_category.php, triggered by manipulation of the dre_Ctitle parameter. Exploitation could be performed remotely, and public disclosures exist. Multiple...

9.8CVSS7AI score0.00383EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2026/01/01 5:32 p.m.•52 views

CVE-2025-15407 code-projects Online Guitar Store Create_category.php sql injection

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Createcategory.php. Such manipulation of the argument dreCtitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public an...

7.5CVSS0.00383EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/01/01 5:32 p.m.•13 views

CVE-2025-15407 code-projects Online Guitar Store Create_category.php sql injection

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Createcategory.php. Such manipulation of the argument dreCtitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public an...

7.5CVSS7AI score0.00383EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/01/01 5:32 p.m.•29 views

EUVD-2026-0009

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Createcategory.php. Such manipulation of the argument dreCtitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public an...

7.5CVSS7.1AI score0.00383EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•28 views

PT-2026-1012

Name of the Vulnerable Software and Affected Versions code-projects Online Guitar Store version 1.0 Description A SQL injection issue exists in code-projects Online Guitar Store version 1.0. The issue affects an unknown function within the /admin/Create category.php file. Manipulation of the dre...

9.8CVSS7AI score0.00383EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•143 views

PT-2026-1014

Name of the Vulnerable Software and Affected Versions code-projects Online Guitar Store version 1.0 Description A SQL injection issue exists in code-projects Online Guitar Store version 1.0. The issue is located in an unknown function within the /admin/Create product.php file. Manipulating the dr...

9.8CVSS7.1AI score0.00383EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•34 views

PT-2026-27654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to IB/mthca, specifically concerning a missing call to mthca unmap user db within the mthca create srq function. This can lead to a...

5.5CVSS5.5AI score0.00127EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•14 views

PT-2026-4328

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.7.4 Description The issue resides in the XML ExternalEntityParserCreate function. It does not properly copy user data for unknown encoding handlers, potentially leading to memory corruption. Reports indicate a...

9.8CVSS6.5AI score0.00186EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•16 views

PT-2026-27749

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel stack leak exists in the RDMA/ionic component, specifically within the ionic create cq function. The issue involves a leak of up to 11 bytes of stack memory due to uninitialized...

5.5CVSS5.4AI score0.00117EPSS
SaveExploits0References17
CNNVD
CNNVD
•added 2026/01/01 12:00 a.m.•18 views

code-projects Online Guitar Store SQL Injection Vulnerability

Code-Projects Online Guitar Store is an online guitar store by Code-Projects open source. A SQL injection vulnerability exists in code-projects Online Guitar Store version 1.0, which stems from an incorrect manipulation of the parameter dreCtitle in the file /admin/Createcategory.php, which could...

9.8CVSS7.2AI score0.00383EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/01/01 12:00 a.m.•25 views

Open5GS security vulnerabilities

Open5GS is an Open5GS open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS version 2.7.6 and earlier, which stems from an incorrect operation of the function sgwcs11handlecreatesessionrequest in the file...

5.5CVSS5.8AI score0.00194EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•34 views

PT-2026-8119

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc5 Description The netdevsim driver lacks a protection mechanism for operations on the bpf bound progs list. Concurrent operations, specifically nsim bpf create prog performing list add tail and nsim bpf...

4.7CVSS6.3AI score0.00099EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/12/31 11:47 a.m.•9 views

CVE-2022-50840

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows: drivers/scsi/snic/snicdisc.c:307 snictgtcreate warn: '&tgt-;list' not removed from list If deviceadd fails in snictgtcreate, tgt will be freed, bu...

6.6AI score0.00284EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/12/31 12:31 a.m.•22 views

SUSE CVE-2022-50840

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows: drivers/scsi/snic/snicdisc.c:307 snictgtcreate warn: '&tgt-list' not removed from list If deviceadd fails in snictgtcreate, tgt will be freed, but...

5.5CVSS6.4AI score0.00284EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2025/12/31 12:28 a.m.•9 views

SUSE CVE-2023-54215

In the Linux kernel, the following vulnerability has been resolved: virtio-vdpa: Fix cpumask memory leak in virtiovdpafindvqs Free the cpumask allocated by createaffinitymasks before returning from the function...

4.7CVSS5.5AI score0.00185EPSS
SaveExploits0References17
Rows per page
Query Builder