Lucene search
+L

1135 matches found

RedhatCVE
RedhatCVE
added 2026/04/29 8:48 p.m.8 views

CVE-2026-7264

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function getcartitems of the file /admin/ajax.php?action=getcartitems. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been ma...

6.5CVSS6.4AI score0.0025EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/28 10:16 a.m.7 views

CVE-2026-7264

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function getcartitems of the file /admin/ajax.php?action=getcartitems. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been ma...

6.5CVSS0.0025EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/28 9:30 a.m.37 views

CVE-2026-7264 SourceCodester Pizzafy Ecommerce System ajax.php get_cart_items sql injection

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function getcartitems of the file /admin/ajax.php?action=getcartitems. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been ma...

6.5CVSS0.0025EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/28 9:30 a.m.11 views

CVE-2026-7264

SourceCodester Pizzafy Ecommerce System 1.0 contains a SQL injection flaw in the get_cart_items function (/admin/ajax.php?action=get_cart_items). The vulnerability is triggered by manipulating the ID argument, allowing remote exploitation. Public exploit material is available. No remediation deta...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/04/28 9:30 a.m.8 views

EUVD-2026-26027

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function getcartitems of the file /admin/ajax.php?action=getcartitems. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been ma...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/04/28 1:22 a.m.8 views

CVE-2026-30350

An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service DoS via a crafted POST request...

7.5CVSS5.3AI score0.00366EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.9 views

PT-2026-35705

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function get cart items of the file /admin/ajax.php?action=get cart items. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has bee...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.15 views

SourceCodester Pizzafy Ecommerce System 注入漏洞

SourceCodester Pizzafy Ecommerce System is an open-source e-commerce system developed by SourceCodester. Version 1.0 of the SourceCodester Pizzafy Ecommerce System has a vulnerability related to SQL injection, which stems from the operation of the getcartitems function in the...

6.5CVSS6.7AI score0.0025EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/27 3:16 p.m.11 views

CVE-2026-30350

An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service DoS via a crafted POST request...

7.5CVSS0.00366EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/27 12:0 a.m.33 views

CVE-2026-30350

An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service DoS via a crafted POST request...

0.00366EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.12 views

Aegra 资源管理错误漏洞

Aegra is a large-scale model application platform developed by Aegra Corporation, designed for building and orchestrating multi-step intelligent agent processes. The Aegra commit e9a89f version contains a resource management vulnerability, which stems from improper handling of the...

7.5CVSS5.8AI score0.00366EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/27 12:0 a.m.19 views

CVE-2026-30350

Technical details are not publicly available in the provided documents. Monitor updates from primary sources for affected components, exact versions, and remediation guidance.

7.5CVSS5.3AI score0.00366EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/27 12:0 a.m.5 views

CVE-2026-30350

An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service DoS via a crafted POST request...

5.3AI score0.00366EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/27 12:0 a.m.9 views

EUVD-2026-25855

An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service DoS via a crafted POST request...

7.5CVSS5.3AI score0.00366EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.12 views

PT-2026-35433

An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service DoS via a crafted POST request...

5.3AI score0.00366EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/25 8:38 a.m.8 views

CLSA-2026-1776949767 squid: Fix of CVE-2021-28116

CVE-2021-28116: fix out-of-bounds read in WCCPv2 message parsing via stricter bounds validation of security, service, router, view, and capability items...

5.3CVSS6.4AI score0.13005EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/04/23 8:9 a.m.5 views

xfs: avoid dereferencing log items after push callbacks

...

7.8CVSS5.2AI score0.00129EPSS
SaveExploits0
OSV
OSV
added 2026/04/22 5:9 p.m.9 views

CLSA-2026-1776877737 squid: Fix of CVE-2021-28116

CVE-2021-28116: fix out-of-bounds read in WCCPv2 message parsing via stricter bounds validation of security, service, router, view, and capability items...

5.3CVSS6.4AI score0.13005EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/22 2:16 p.m.7 views

CVE-2026-31453

In the Linux kernel, the following vulnerability has been resolved: xfs: avoid dereferencing log items after push callbacks After xfsaildpushitem calls ioppush, the log item may have been freed if the AIL lock was dropped during the push. Background inode reclaim or the dquot shrinker can free th...

7.8CVSS0.00129EPSS
SaveExploits0References6
OSV
OSV
added 2026/04/22 1:53 p.m.4 views

CVE-2026-31453 xfs: avoid dereferencing log items after push callbacks

In the Linux kernel, the following vulnerability has been resolved: xfs: avoid dereferencing log items after push callbacks After xfsaildpushitem calls ioppush, the log item may have been freed if the AIL lock was dropped during the push. Background inode reclaim or the dquot shrinker can free th...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References9
Rows per page
Query Builder