Lucene search
K

12 matches found

CVE
CVE
added 2026/05/04 4:15 a.m.18 views

CVE-2026-7731

CVE-2026-7731 affects code-projects BloodBank Managing System 1.0. The vulnerability is an SQL injection in an unknown function within get_state.php triggered by manipulating the G_STATE_ID argument. It allows remote exploitation and the exploit has been publicly disclosed. Connected sources prov...

6.5CVSS6.4AI score0.00012EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/05/04 4:15 a.m.32 views

CVE-2026-7731 code-projects BloodBank Managing System get_state.php sql injection

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file getstate.php. The manipulation of the argument GSTATEID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS0.00012EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.4 views

PT-2026-36760

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file get state.php. The manipulation of the argument G STATE ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS6.4AI score0.00012EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/05/04 12:0 a.m.5 views

Code-Projects BloodBank Managing System 注入漏洞

The Code-Projects BloodBank Managing System is an open-source blood bank management system developed by Code-Projects. Version 1.0 of the code-projects BloodBank Managing System contains a SQL injection vulnerability. This vulnerability arises from an unknown function in the getstate.php file,...

6.5CVSS6.6AI score0.00012EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/09 12:29 p.m.9 views

CVE-2025-42616

Some endpoints in vulnerability-lookup that modified application state e.g. changing database entries, user data, configurations, or other privileged actions may have been accessible via HTTP GET requests without requiring a CSRF token. This flaw leaves the application vulnerable to Cross-Site...

7CVSS7AI score0.00025EPSS
Exploits0References1
OSV
OSV
added 2025/02/26 7:0 a.m.1 views

UBUNTU-CVE-2022-49106

In the Linux kernel, the following vulnerability has been resolved: staging: vchiqarm: Avoid NULL ptr deref in vchiqdumpplatforminstances vchiqgetstate can return a NULL pointer. So handle this cases and avoid a NULL pointer derefence in vchiqdumpplatforminstances...

5.5CVSS6.5AI score0.00016EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2025/02/26 1:54 a.m.2 views

CVE-2022-49106 staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances

In the Linux kernel, the following vulnerability has been resolved: staging: vchiqarm: Avoid NULL ptr deref in vchiqdumpplatforminstances vchiqgetstate can return a NULL pointer. So handle this cases and avoid a NULL pointer derefence in vchiqdumpplatforminstances...

6.6AI score0.00016EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the possibility that vchiqgetstate in the vchiqarm driver may return NULL, resulting in a null pointer...

5.5CVSS5.5AI score0.00016EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.5 views

PT-2025-3160 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 11.5.42 ELTS Description: A vulnerability has been identified in the backend user interface functionality involving deep links, which is susceptible to Cross-Site Request Forgery CSRF. State-changing actions in...

4.3CVSS6.8AI score0.00309EPSS
Exploits0References7
OSV
OSV
added 2024/07/12 1:15 p.m.1 views

DEBIAN-CVE-2024-39505

In the Linux kernel, the following vulnerability has been resolved: drm/komeda: check for error-valued pointer komedapipelinegetstate may return an error-valued pointer, thus check the pointer for negative or null value before dereferencing...

5.5CVSS5.4AI score0.00016EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/06/13 12:0 a.m.4 views

PT-2024-23028 · Aurora · Aurora

Name of the Vulnerable Software and Affected Versions: Aurora affected versions not specified Description: The issue is related to an information disclosure due to uninitialized data in the aur get state function of aurora.c. This could lead to local information disclosure without requiring...

5.5CVSS6.2AI score0.0003EPSS
Exploits0References4
CNVD
CNVD
added 2016/12/02 12:0 a.m.3 views

SQL Injection Vulnerability in YxtCMF Online Learning System

YxtCMF online learning system is an online learning platform system developed with thinkphp+bootstrap as the framework. YxtCMF Online Learning System is vulnerable to SQL injection. The lack of filtering due to the '$state=I"get.state";' parameter allows an attacker to exploit the vulnerability t...

7.8AI score
Exploits0
Rows per page
Query Builder