Lucene search
+L

6668 matches found

OSV
OSV
added 2026/01/01 6:15 p.m.5 views

CVE-2025-15407

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Createcategory.php. Such manipulation of the argument dreCtitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public an...

9.8CVSS5.8AI score0.00374EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/01 6:02 p.m.7 views

CVE-2025-15408

A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Createproduct.php. Performing a manipulation of the argument dretitle results in sql injection. The attack is possible to be carried out remotely. The exploit has been made publi...

9.8CVSS7.1AI score0.00374EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/01 6:02 p.m.7 views

CVE-2025-15408 code-projects Online Guitar Store Create_product.php sql injection

A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Createproduct.php. Performing a manipulation of the argument dretitle results in sql injection. The attack is possible to be carried out remotely. The exploit has been made publi...

7.5CVSS7.1AI score0.00374EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/01/01 6:02 p.m.14 views

EUVD-2026-0011

A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Createproduct.php. Performing manipulation of the argument dretitle results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public...

7.5CVSS7.2AI score0.00374EPSS
SaveExploits1References7
CVE
CVE
added 2026/01/01 6:02 p.m.24 views

CVE-2025-15408

CVE-2025-15408 affects code-projects Online Guitar Store 1.0. The vulnerability is a SQL injection in /admin/Create_product.php via the dre_title parameter. Exploitation is possible remotely and the exploit has been publicly released. Connected documents confirm the root cause (unsafely processed...

9.8CVSS7.1AI score0.00374EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/01 6:02 p.m.37 views

CVE-2025-15408 code-projects Online Guitar Store Create_product.php sql injection

A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Createproduct.php. Performing a manipulation of the argument dretitle results in sql injection. The attack is possible to be carried out remotely. The exploit has been made publi...

7.5CVSS0.00374EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/01 5:32 p.m.38 views

CVE-2025-15407 code-projects Online Guitar Store Create_category.php sql injection

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Createcategory.php. Such manipulation of the argument dreCtitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public an...

7.5CVSS0.00374EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/01/01 5:32 p.m.15 views

EUVD-2026-0009

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Createcategory.php. Such manipulation of the argument dreCtitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public an...

7.5CVSS7.2AI score0.00374EPSS
SaveExploits1References7
CVE
CVE
added 2026/01/01 5:32 p.m.25 views

CVE-2025-15407

CVE-2025-15407 affects code-projects Online Guitar Store 1.0. The vulnerability is a SQL injection in an unknown function of the file /admin/Create_category.php, triggered by manipulation of the dre_Ctitle parameter. Exploitation could be performed remotely, and public disclosures exist. Multiple...

9.8CVSS7.3AI score0.00374EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/01 5:32 p.m.7 views

CVE-2025-15407 code-projects Online Guitar Store Create_category.php sql injection

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Createcategory.php. Such manipulation of the argument dreCtitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public an...

7.5CVSS6.8AI score0.00374EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.109 views

PT-2026-1014

Name of the Vulnerable Software and Affected Versions code-projects Online Guitar Store version 1.0 Description A SQL injection issue exists in code-projects Online Guitar Store version 1.0. The issue is located in an unknown function within the /admin/Create product.php file. Manipulating the dr...

9.8CVSS7.2AI score0.00374EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.21 views

PT-2026-27654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to IB/mthca, specifically concerning a missing call to mthca unmap user db within the mthca create srq function. This can lead to a...

5.5CVSS5.5AI score0.00123EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/01/01 12:00 a.m.11 views

Open5GS 安全漏洞

Open5GS is an Open5GS open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS version 2.7.6 and earlier, which stems from an incorrect operation of the function sgwcs11handlecreatesessionrequest in the file...

5.5CVSS4.2AI score0.0019EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.24 views

PT-2026-8119

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc5 Description The netdevsim driver lacks a protection mechanism for operations on the bpf bound progs list. Concurrent operations, specifically nsim bpf create prog performing list add tail and nsim bpf...

7.8CVSS6.5AI score0.00086EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/01/01 12:00 a.m.10 views

code-projects Online Guitar Store SQL注入漏洞

Code-Projects Online Guitar Store is an online guitar store by Code-Projects open source. A SQL injection vulnerability exists in code-projects Online Guitar Store version 1.0, which stems from an incorrect manipulation of the parameter dreCtitle in the file /admin/Createcategory.php, which could...

9.8CVSS7.8AI score0.00374EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.15 views

PT-2026-1012

Name of the Vulnerable Software and Affected Versions code-projects Online Guitar Store version 1.0 Description A SQL injection issue exists in code-projects Online Guitar Store version 1.0. The issue affects an unknown function within the /admin/Create category.php file. Manipulation of the dre...

9.8CVSS7.4AI score0.00374EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.11 views

PT-2026-4328

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.7.4 Description The issue resides in the XML ExternalEntityParserCreate function. It does not properly copy user data for unknown encoding handlers, potentially leading to memory corruption. Reports indicate a...

9.8CVSS7.3AI score0.00173EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/12/31 11:47 a.m.6 views

CVE-2022-50840

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows: drivers/scsi/snic/snicdisc.c:307 snictgtcreate warn: '&tgt-;list' not removed from list If deviceadd fails in snictgtcreate, tgt will be freed, bu...

5.8AI score0.0028EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/12/31 12:31 a.m.15 views

SUSE CVE-2022-50840

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows: drivers/scsi/snic/snicdisc.c:307 snictgtcreate warn: '&tgt-list' not removed from list If deviceadd fails in snictgtcreate, tgt will be freed, but...

5.5CVSS6.5AI score0.0028EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2025/12/31 12:28 a.m.6 views

SUSE CVE-2023-54215

In the Linux kernel, the following vulnerability has been resolved: virtio-vdpa: Fix cpumask memory leak in virtiovdpafindvqs Free the cpumask allocated by createaffinitymasks before returning from the function...

4.7CVSS6.5AI score0.00182EPSS
SaveExploits0References17
Rows per page
Query Builder