Lucene search
+L

13267 matches found

attackerkb
attackerkb
•added 2026/04/08 10:15 p.m.•10 views

CVE-2026-5811

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

5.5CVSS5.8AI score0.00415EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2026/04/08 6:34 p.m.•34 views

EUVD-2025-209308

A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation...

5.3CVSS5.9AI score0.00287EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/08 4:41 p.m.•41 views

CVE-2025-14243 Mirror-registry: openshift mirror registry: user enumeration via authentication error messages

A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation...

5.3CVSS0.00287EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/08 4:41 p.m.•10 views

CVE-2025-14243 Mirror-registry: openshift mirror registry: user enumeration via authentication error messages

A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation...

5.3CVSS5.9AI score0.00287EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/08 4:41 p.m.•30 views

CVE-2025-14243

CVE-2025-14243 concerns the OpenShift Mirror Registry. The vulnerability allows an unauthenticated remote attacker to enumerate valid usernames and email addresses by eliciting different error messages during authentication failures and account creation. Affected component: OpenShift Mirror Regis...

5.3CVSS5.9AI score0.00287EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/04/08 12:17 a.m.•26 views

GHSA-26PP-8WGV-HJVM Hono missing validation of cookie name on write path in setCookie()

Summary Cookie names are not validated on the write path when using setCookie, serialize, or serializeSigned to generate Set-Cookie headers. While certain cookie attributes such as domain and path are validated, the cookie name itself may contain invalid characters. This results in inconsistent...

5.3CVSS5.9AI score0.00418EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/04/08 12:17 a.m.•31 views

HTTP Response Splitting

Overview org.webjars.npm:hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to HTTP Response Splitting via the setCookie function. An attacker can cause runtime errors and potentially disrupt application behavior by supplying specially crafted input ...

6.9CVSS5.8AI score0.00418EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•20 views

PT-2026-31329

Name of the Vulnerable Software and Affected Versions OpenShift Mirror Registry affected versions not specified Description A flaw exists in the OpenShift Mirror Registry that allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses through differing error...

5.3CVSS5.8AI score0.00287EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•3 views

CVE-2026-5811: Undefined Security Weakness

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

5.5CVSS5.6AI score0.00415EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•18 views

Red Hat OpenShift Mirror Registry 安全漏洞

Red Hat OpenShift Mirror Registry is a lightweight container image repository service provided by Red Hat Corporation. There is a security vulnerability in Red Hat OpenShift Mirror Registry. This vulnerability stems from failed authentication processes and different error messages during account...

5.3CVSS5.8AI score0.00287EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•20 views

SourceCodester Pharmacy Product Management System 安全漏洞

SourceCodester Pharmacy Product Management System is an open-source medication management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Product Management System contains a security vulnerability. This vulnerability stems from incorrect handling of the parameter...

5.5CVSS6AI score0.00415EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•30 views

SourceCodester Online Food Ordering System 安全漏洞

The SourceCodester Online Food Ordering System is an open-source online ordering system developed by SourceCodester. Version 1.0 of the SourceCodester Online Food Ordering System has a security vulnerability. This vulnerability stems from the handling of the parameter ‘price’ in the ‘saveproduct’...

5.5CVSS6AI score0.00415EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•22 views

PT-2026-31550

Name of the Vulnerable Software and Affected Versions SourceCodester Pharmacy Product Management System version 1.0 Description A security flaw exists in SourceCodester Pharmacy Product Management System 1.0. The issue is located in an unknown part of the add-sales.php file within the POST...

5.5CVSS5.9AI score0.00415EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•22 views

PT-2026-32052

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Autonomous Digital Experience Manager on Windows affected versions not specified Description A certificate validation issue exists in Palo Alto Networks Autonomous Digital Experience Manager on Windows. An unauthenticated...

8.8CVSS6.1AI score0.00175EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•4 views

CVE-2026-5812: Undefined Security Weakness

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS5.6AI score0.00415EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/04/08 12:00 a.m.•16 views

The vulnerability of embedded software developed by Qualcomm, related to access control errors, allows attackers to cause memory corruption.

The vulnerability of embedded Qualcomm software programs is related to access control errors. Exploiting this vulnerability can allow an attacker to cause memory corruption...

7.8CVSS5.8AI score0.00094EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/04/08 12:00 a.m.•21 views

The vulnerability of the analytics and automation platform for managing cloud data centers of Cisco Nexus, related to errors in the certificate validation process, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Cisco Nexus Dashboard analytics and cloud computing platform relates to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

8.5CVSS6AI score0.00293EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/04/08 12:00 a.m.•10 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006723)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006723 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA aka ENOATTR has a very specifi...

7.8CVSS6.1AI score0.00172EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/04/08 12:00 a.m.•14 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006582)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006582 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on...

5.5CVSS6AI score0.00148EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•19 views

PT-2026-31549

Name of the Vulnerable Software and Affected Versions SourceCodester Online Food Ordering System version 1.0 Description A vulnerability exists in the function save product of the file /Actions.php within the POST Parameter Handler component. Manipulation of the price argument can lead to busines...

5.5CVSS6AI score0.00415EPSS
SaveExploits0References9
Rows per page
Query Builder