Lucene search
+L

800 matches found

vulnersOsv
vulnersOsv
•added 2023/04/28 12:15 a.m.•2 views

farm (>=0.4.5, <=0.6.1), farm-haystack (>=0.3.0, <=0.6.0) +2 more potentially affected by CVE-2023-2356 via mlflow (1.0.0)

mlflow PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - farm =0.4.5, =0.3.0, =0.0.1a1.dev14, =0.0.1a1.dev15 - mlflow-faculty 0.3.1 Source cves: CVE-2023-2356 Source advisory: OSV:PYSEC-2023-68...

10CVSS0.04153EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2023/04/28 12:15 a.m.•2 views

faculty-models (>=0.1.0, <=0.1.1), mlflow-faculty (>=0.4.0, <=0.4.3) potentially affected by CVE-2023-2356 via mlflow (1.2.0)

mlflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models =0.1.0, =0.4.0, =0.4.3 Source cves: CVE-2023-2356 Source advisory: OSV:PYSEC-2023-68...

10CVSS0.04153EPSS
SaveExploits1
CNNVD
CNNVD
•added 2023/04/28 12:00 a.m.•20 views

Faculty Evaluation System SQL Injection Vulnerability

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of ajax.php?action=deleteclass...

9.8CVSS7.2AI score0.00791EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/04/28 12:00 a.m.•18 views

Faculty Evaluation System SQL Injection Vulnerability

Faculty Evaluation System is a faculty evaluation system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection problem in the id parameter of index.php?page=managequestionnaire...

9.8CVSS6AI score0.00722EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/04/28 12:00 a.m.•22 views

Faculty Evaluation System SQL Injection Vulnerability

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of /admin/manageacademic.php...

9.8CVSS6AI score0.00722EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/04/28 12:00 a.m.•52 views

PT-2023-19134 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue affects the processing of the file admin/manage restriction.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated...

9.8CVSS5.5AI score0.00722EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/04/28 12:00 a.m.•18 views

PT-2023-19102 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue has been found in the SourceCodester Faculty Evaluation System, affecting an unknown functionality of the file "ajax.php?action=delete subject". The manipulati...

9.8CVSS7.8AI score0.00737EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•3 views

CVE-2023-2368: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php?page=managequestionnaire. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. Th...

9.8CVSS5.5AI score0.00722EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•3 views

CVE-2023-2367: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/manageacademic.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploi...

9.8CVSS5.5AI score0.00722EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•5 views

CVE-2023-2365: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file ajax.php?action=deletesubject. The manipulation of the argument id leads to sql injection. The attack can be launched...

9.8CVSS5.5AI score0.00737EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•4 views

CVE-2023-2369: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/managerestriction.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The explo...

9.8CVSS5.5AI score0.00722EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•9 views

CVE-2023-2366: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajax.php?action=deleteclass. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

9.8CVSS5.5AI score0.00791EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/28 12:00 a.m.•20 views

PT-2023-19113 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin/manage academic.php. The manipulation of the id argument leads to sql injection,...

9.8CVSS5.3AI score0.00722EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/04/28 12:00 a.m.•18 views

Faculty Evaluation System SQL Injection Vulnerability

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of ajax.php?action=deletesubject...

9.8CVSS7.2AI score0.00737EPSS
SaveExploits1References4
vulnersOsv
vulnersOsv
•added 2023/03/24 10:01 p.m.•1 views

faculty-models (>=0.1.0, <=0.1.1), mlflow-faculty (>=0.4.0, <=0.4.3) potentially affected by CVE-2023-1176 via mlflow (1.2.0)

mlflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models =0.1.0, =0.4.0, =0.4.3 Source cves: CVE-2023-1176 Source advisory: OSV:GHSA-WP72-7HJ9-5265...

5.3CVSS0.00583EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2023/03/24 10:01 p.m.•1 views

faculty-models (0.2.0), mlflow-faculty (0.5.0) potentially affected by CVE-2023-1176 via mlflow (1.7.2)

mlflow PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models 0.2.0 - mlflow-faculty 0.5.0 Source cves: CVE-2023-1176 Source advisory: OSV:GHSA-WP72-7HJ9-5265...

5.3CVSS0.00583EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2023/03/24 10:01 p.m.•2 views

faculty-models (>=0.1.0, <=0.1.1), mlflow-faculty (>=0.4.0, <=0.4.3) potentially affected by CVE-2023-1177 via mlflow (1.2.0)

mlflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models =0.1.0, =0.4.0, =0.4.3 Source cves: CVE-2023-1177 Source advisory: OSV:GHSA-XG73-94FP-G449...

9.8CVSS0.6968EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2023/03/24 10:01 p.m.•2 views

faculty-models (0.2.0), mlflow-faculty (0.5.0) potentially affected by CVE-2023-1177 via mlflow (1.7.2)

mlflow PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models 0.2.0 - mlflow-faculty 0.5.0 Source cves: CVE-2023-1177 Source advisory: OSV:GHSA-XG73-94FP-G449...

9.8CVSS0.6968EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2023/03/24 10:01 p.m.•1 views

farm (>=0.4.5, <=0.6.1), farm-haystack (>=0.3.0, <=0.6.0) +2 more potentially affected by CVE-2023-1177 via mlflow (1.0.0)

mlflow PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - farm =0.4.5, =0.3.0, =0.0.1a1.dev14, =0.0.1a1.dev15 - mlflow-faculty 0.3.1 Source cves: CVE-2023-1177 Source advisory: OSV:GHSA-XG73-94FP-G449...

9.8CVSS0.6968EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2023/03/24 3:15 p.m.•2 views

faculty-models (0.2.0), mlflow-faculty (0.5.0) potentially affected by CVE-2023-1177 via mlflow (1.7.2)

mlflow PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models 0.2.0 - mlflow-faculty 0.5.0 Source cves: CVE-2023-1177 Source advisory: OSV:PYSEC-2023-29...

9.8CVSS0.6968EPSS
SaveExploits2
Rows per page
Query Builder