Lucene search
+L

11541 matches found

RedhatCVE
RedhatCVE
added 2026/03/03 1:48 a.m.9 views

CVE-2026-26695

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudentedit.php...

9.8CVSS6AI score0.00486EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/03 1:48 a.m.6 views

CVE-2026-26710

code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php...

9.8CVSS6AI score0.00337EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/03 1:48 a.m.9 views

CVE-2026-26701

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edittecnicaluser.php...

9.8CVSS6AI score0.0047EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/03 12:0 a.m.11 views

EUVD-2021-22125

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editing of an...

6AI score0.00221EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/03 12:0 a.m.8 views

CVE-2021-35485

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the...

8CVSS5.9AI score0.00226EPSS
SaveExploits0References4
CVE
CVE
added 2026/03/03 12:0 a.m.23 views

CVE-2021-35485

CVE-2021-35485 impacts Nokia IMPACT’s Applications component for versions up to 19.11.2.10-20210118042150283. An authenticated user can arbitrarily upload server-side executable files through the /ui/rest-proxy/application fileupload parameter when adding a new application or editing an existing ...

8CVSS5.9AI score0.00226EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/03 12:0 a.m.3 views

CVE-2021-35483

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editing of an...

6AI score0.00221EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/03 12:0 a.m.10 views

IBM Engineering Requirements Management DOORS Next 安全漏洞

IBM Engineering Requirements Management DOORS Next is a scalable solution provided by the American company International Business Machines IBM. This solution can help you capture, track, analyze, and manage systems as well as advanced IT application development. Versions 7.1 and 7.2 of IBM...

5.4CVSS5.8AI score0.00144EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/02 7:16 p.m.4 views

CVE-2026-26710

code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php...

9.8CVSS5.9AI score0.00337EPSS
SaveExploits1References1
NVD
NVD
added 2026/03/02 7:16 p.m.18 views

CVE-2026-26710

code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php...

9.8CVSS0.00337EPSS
SaveExploits1References1
NVD
NVD
added 2026/03/02 5:16 p.m.8 views

CVE-2026-26700

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/editemployee.php...

9.8CVSS0.00391EPSS
SaveExploits1References1
OSV
OSV
added 2026/03/02 5:16 p.m.10 views

CVE-2026-26700

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/editemployee.php...

9.8CVSS5.9AI score0.00391EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/03/02 3:17 p.m.4 views

CVE-2025-50196 Chamilo: OS Command Injection in /plugin/vchamilo/views/editinstance.php via POST main_database parameter

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/editinstance.php via the POST maindatabase parameter. This issue has been patched in version 1.11.30...

7.1CVSS5.9AI score0.02746EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/03/02 3:17 p.m.8 views

EUVD-2025-208165

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/editinstance.php via the POST maindatabase parameter. This issue has been patched in version 1.11.30...

7.1CVSS5.9AI score0.02746EPSS
SaveExploits1References4
OSV
OSV
added 2026/03/02 3:16 p.m.7 views

CVE-2026-26695

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudentedit.php...

9.8CVSS5.9AI score0.00486EPSS
SaveExploits1References1
NVD
NVD
added 2026/03/02 3:16 p.m.11 views

CVE-2026-26696

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacheredit.php...

9.8CVSS0.00486EPSS
SaveExploits1References1
OSV
OSV
added 2026/03/02 2:16 p.m.6 views

CVE-2026-26698

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modaledit.php...

4.9CVSS5.8AI score0.00276EPSS
SaveExploits1References1
NVD
NVD
added 2026/03/02 2:16 p.m.12 views

CVE-2026-26698

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modaledit.php...

4.9CVSS0.00276EPSS
SaveExploits1References1
NVD
NVD
added 2026/03/02 2:16 a.m.14 views

CVE-2026-3403

A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown processing of the file /edit-subject.php. Performing a manipulation of the argument Subject 1 results in cross site scripting. The attack is possible to be carried out remotely. The...

4.8CVSS0.00202EPSS
SaveExploits1References5
OSV
OSV
added 2026/03/02 1:16 a.m.10 views

CVE-2026-3402

A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability affects unknown code of the file /edit-course.php. Such manipulation of the argument Course Short Name leads to cross site scripting. The attack can be executed remotely. The...

4.8CVSS4AI score0.00202EPSS
SaveExploits1References5
Rows per page
Query Builder