Lucene search
+L

13366 matches found

Vulnrichment
Vulnrichment
added 2024/05/15 2:13 p.m.21 views

CVE-2024-34955

Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter...

8.1AI score0.00601EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2024/05/15 12:00 a.m.16 views

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, ...

6.4CVSS7.2AI score0.00346EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2024/05/15 12:00 a.m.6 views

Budget Management security breach

SourceCodester Budget Management System is an application from SourceCodester, Inc. It provides a function to calculate exact expenses through a web application. A security vulnerability exists in Budget Management version 1.0 that stems from the vulnerability to SQL injection attacks via the...

9.8CVSS7.9AI score0.00601EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/05/15 12:00 a.m.15 views

PT-2024-26270 · Unknown · Code-Projects Budget Management

Name of the Vulnerable Software and Affected Versions: Code-projects Budget Management version 1.0 Description: The issue is related to SQL Injection, which occurs via the delete parameter. This allows for potential manipulation of database queries. Recommendations: For Code-projects Budget...

9.8CVSS7.8AI score0.00601EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2024/05/15 12:00 a.m.11 views

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, ...

6.4CVSS7.2AI score0.00373EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2024/05/14 3:44 p.m.9 views

CVE-2024-4792

A vulnerability, which was classified as critical, has been found in Campcodes Online Laundry Management System 1.0. This issue affects some unknown processing of the file /adminclass.php. The manipulation of the argument...

8.8CVSS5.7AI score0.00838EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/14 3:44 p.m.14 views

CVE-2024-4719

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /model/deleterecord.php. The manipulation of the argument page leads to cross site scripting. The...

6.1CVSS3.6AI score0.00635EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/14 3:44 p.m.9 views

CVE-2024-4718

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /model/deletestudentgradesubject.php. The manipulation of the argument index leads to cross site scripting. It is possible to...

6.1CVSS3.7AI score0.00635EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/14 3:41 p.m.13 views

CVE-2024-3590

The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete arbitrary subscribers...

6.1CVSS5.9AI score0.00232EPSS
SaveExploits2References1
OSV
OSV
added 2024/05/14 3:31 p.m.8 views

CVE-2024-34191

htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the deletepost function at admin.php. This vulnerability allows attackers to delete arbitrary files via a crafted request...

6.5CVSS7.5AI score
SaveExploits0References3
OSV
OSV
added 2024/05/14 3:12 p.m.9 views

UBUNTU-CVE-2024-27399

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: fix null-ptr-deref in l2capchantimeout There is a race condition between l2capchantimeout and l2capchandel. When we use l2capchandel to delete the channel, the chan-conn will be set to null. But the conn could b...

5.5CVSS6.2AI score0.00304EPSS
SaveExploits0References22
OSV
OSV
added 2024/05/14 3:09 p.m.11 views

CVE-2024-26517

SQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the delete-task.php component...

9.1CVSS5.9AI score0.00802EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/14 3:09 p.m.28 views

CVE-2024-26517

SQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the delete-task.php component...

9.1CVSS7.1AI score0.00802EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.11 views

College Management System SQL注入漏洞

College Management System is a simple project organized by Code Projects. It is used to keep track of students, faculty, subjects, schedules and all things related to the university. College Management System version 1.0 has a SQL injection vulnerability that stems from a SQL injection...

8.8CVSS7.1AI score0.00806EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.9 views

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a cross-site scripting vulnerability in the...

6.1CVSS4.5AI score0.00635EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/05/14 12:00 a.m.9 views

PT-2024-29388 · Unknown · Manage Bank Statement Reprocessing Rules

Name of the Vulnerable Software and Affected Versions: Manage Bank Statement ReProcessing Rules affected versions not specified Description: The issue is related to insufficient authorization checks for authenticated users, leading to potential escalation of privileges. An attacker can exploit th...

4.3CVSS7AI score0.00286EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.11 views

School Task Manager Security Vulnerability

School Task Manager is a school task manager by rems individual developer. A security vulnerability exists in School Task Manager version 1.0, which stems from a SQL injection vulnerability that allows remote attackers to obtain sensitive information from the delete-task.php component via a craft...

9.1CVSS7.5AI score0.00802EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.11 views

Laundry Management System SQL注入漏洞

Laundry Management System is a laundry management system. A SQL injection vulnerability exists in Online Laundry Management System version 1.0, which originates from an SQL injection vulnerability in the id/deletecategory/deleteinv/deletelaundry/deletesupply/ The SQL injection vulnerability exist...

8.8CVSS7AI score0.00838EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.8 views

College Management System SQL注入漏洞

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to the university. College Management System version 1.0 has a SQL injection vulnerability that stems from a SQL injection...

8.8CVSS7.1AI score0.00803EPSS
SaveExploits1References6
GithubExploit
GithubExploit
added 2024/05/12 9:53 a.m.631 views

Exploit for CVE-2024-27460

CVE-2024-27460 - Plantronics Desktop Hub LPE Arbitrary File D...

7.8CVSS7.2AI score0.05374EPSS
SaveExploits4
Rows per page
Query Builder