Lucene search
+L

419 matches found

BDU FSTEC
BDU FSTEC
•added 2025/07/30 12:00 a.m.•17 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to mutual flow blocking, allows a attacker to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to mutual blocking of execution streams. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS5.7AI score0.00243EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/07/30 12:00 a.m.•15 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server lies in the fact that resources are not released after their useful period has ended. This allows attackers to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a malicious actor to cause service interruptions by...

6.8CVSS5.5AI score0.00298EPSS
SaveExploits0References2Affected Software2
OSV
OSV
•added 2025/07/29 1:38 p.m.•26 views

RLSA-2025:3082 Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation CVE-2025-1094 For more details about the security issues, including the impact, a CVSS score,...

8.1CVSS7.8AI score0.9003EPSS
SaveExploits10References2
OSV
OSV
•added 2025/07/29 1:38 p.m.•13 views

RLSA-2024:0974 Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL CVE-2024-0985 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and oth...

8CVSS7.3AI score0.01808EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/06/17 4:31 a.m.•40 views

CVE-2025-6160 SourceCodester Client Database Management System user_customer_create_order.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /usercustomercreateorder.php. The manipulation of the argument userid leads to sql injection. The attack may be initiat...

7.5CVSS0.00608EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/17 4:31 a.m.•45 views

CVE-2025-6160

CVE-2025-6160 affects SourceCodester Client Database Management System 1.0. Affects the file /user_customer_create_order.php where manipulation of the user_id parameter enables a SQL injection. The issue can be exploited remotely and, per sources, the exploit has been disclosed publicly. Public m...

9.8CVSS7.5AI score0.00608EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/06/17 12:00 a.m.•25 views

PT-2025-25618

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description A critical issue has been found in the software, affecting the processing of the file /user customer create order.php. The manipulation of the user id argument leads to S...

9.8CVSS6.8AI score0.00608EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/17 12:00 a.m.•3 views

CVE-2025-6160: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /usercustomercreateorder.php. The manipulation of the argument userid leads to sql injection. The attack may be initiat...

9.8CVSS5.5AI score0.00608EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/09 6:09 p.m.•15 views

CVE-2025-5840

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS7.1AI score0.00462EPSS
SaveExploits2References1
NVD
NVD
•added 2025/06/07 6:15 p.m.•25 views

CVE-2025-5840

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS0.00462EPSS
SaveExploits2References5
Vulnrichment
Vulnrichment
•added 2025/06/07 6:00 p.m.•14 views

CVE-2025-5840 SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS7.2AI score0.00462EPSS
SaveExploits2References5
Cvelist
Cvelist
•added 2025/06/07 6:00 p.m.•39 views

CVE-2025-5840 SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS0.00462EPSS
SaveExploits2References5
CVE
CVE
•added 2025/06/07 6:00 p.m.•88 views

CVE-2025-5840

SourceCodester Client Database Management System 1.0 contains a vulnerability in the file /user_update_customer_order.php where the uploaded_file parameter can be manipulated to achieve unrestricted file upload. This remote-access flaw could allow an attacker to upload arbitrary files, potentiall...

7.5CVSS7AI score0.00462EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/07 12:00 a.m.•3 views

CVE-2025-5840: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...

7.5CVSS7AI score0.00462EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2025/06/07 12:00 a.m.•20 views

PT-2025-24347 · Unknown · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Client Database Management System. This issue affects an unknown part of the file /user update customer...

7.5CVSS7.1AI score0.00462EPSS
SaveExploits2References13
RedhatCVE
RedhatCVE
•added 2025/05/30 12:49 p.m.•29 views

CVE-2025-5299

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS7.1AI score0.00627EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/28 10:47 p.m.•38 views

CVE-2025-5207

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The...

9.8CVSS7.3AI score0.00423EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/28 12:15 p.m.•22 views

CVE-2025-5299

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS0.00627EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/28 12:00 p.m.•35 views

CVE-2025-5299 SourceCodester Client Database Management System user_order_customer_update.php unrestricted upload

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

7.5CVSS0.00627EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/28 12:00 p.m.•76 views

CVE-2025-5299

CVE-2025-5299 affects SourceCodester Client Database Management System v1.0. The vulnerability is in the file /user_order_customer_update.php, where manipulating the argument uploaded_file_cancelled enables unrestricted file upload. Exploitation is possible remotely and exploits have been disclos...

7.5CVSS7.3AI score0.00627EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder