Lucene search
+L

631 matches found

OSV
OSV
added 2026/01/08 10:16 p.m.7 views

CVE-2026-0730

A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADDSTAFF/UPDATESTAFF of the file /staffleave/slms/slms/adminviews.py of the component SVG File Handler. Executing a manipulation of the argument profilepic can lead to cross site scripting...

4.8CVSS4AI score0.00238EPSS
SaveExploits1References5
NVD
NVD
added 2026/01/08 10:16 p.m.8 views

CVE-2026-0730

A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADDSTAFF/UPDATESTAFF of the file /staffleave/slms/slms/adminviews.py of the component SVG File Handler. Executing a manipulation of the argument profilepic can lead to cross site scripting...

4.8CVSS0.00238EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/08 10:2 p.m.33 views

CVE-2026-0730 PHPGurukul Staff Leave Management System SVG File adminviews.py UPDATE_STAFF cross site scripting

A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADDSTAFF/UPDATESTAFF of the file /staffleave/slms/slms/adminviews.py of the component SVG File Handler. Executing a manipulation of the argument profilepic can lead to cross site scripting...

4.8CVSS0.00238EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/08 10:2 p.m.5 views

CVE-2026-0730 PHPGurukul Staff Leave Management System SVG File adminviews.py UPDATE_STAFF cross site scripting

A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADDSTAFF/UPDATESTAFF of the file /staffleave/slms/slms/adminviews.py of the component SVG File Handler. Executing a manipulation of the argument profilepic can lead to cross site scripting...

4.8CVSS5.2AI score0.00238EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/08 10:2 p.m.21 views

CVE-2026-0730

PHPGurukul Staff Leave Management System 1.0 is affected by a cross-site scripting vulnerability in the SVG File Handler, specifically the ADD_STAFF/UPDATE_STAFF function in /staffleave/slms/slms/adminviews.py. Manipulating the profile_pic argument can trigger XSS, with remote exploitation report...

4.8CVSS5.2AI score0.00238EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.16 views

PT-2026-1980

Name of the Vulnerable Software and Affected Versions PHPGurukul Staff Leave Management System version 1.0 Description A flaw exists in PHPGurukul Staff Leave Management System 1.0 related to cross-site scripting. The issue is located in the ADD STAFF/UPDATE STAFF function within the...

4.8CVSS5.6AI score0.00238EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
added 2026/01/07 9:19 a.m.7 views

CVE-2024-2233

The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. These include declining and accepting group invitations or leaving a group...

6.3CVSS6.7AI score0.00193EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/06 12:19 a.m.11 views

CVE-2025-67315

Cross Site Request Forgery vulnerability in Employee Leave Management System v.2.1 allows a remote attacker to escalate privileges via the manage-employee.php component...

5.4CVSS7.2AI score0.0007EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/05 4:15 p.m.7 views

CVE-2025-67315

Cross Site Request Forgery vulnerability in Employee Leave Management System v.2.1 allows a remote attacker to escalate privileges via the manage-employee.php component...

5.4CVSS5.8AI score0.0007EPSS
SaveExploits0References2
NVD
NVD
added 2026/01/05 4:15 p.m.7 views

CVE-2025-67315

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

0.0007EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/01/05 12:0 a.m.27 views

CVE-2025-67315

...

0.0007EPSS
SaveExploits0
EUVD
EUVD
added 2026/01/05 12:0 a.m.6 views

EUVD-2026-0808

Cross Site Request Forgery vulnerability in Employee Leave Management System v.2.1 allows a remote attacker to escalate privileges via the manage-employee.php component...

5.4CVSS6.7AI score0.0007EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/01/05 12:0 a.m.2 views

CVE-2025-67315

...

5.9AI score0.0007EPSS
SaveExploits0
CVE
CVE
added 2026/01/05 12:0 a.m.18 views

CVE-2025-67315

CVE-2025-67315 affects the PHPGurukul Employee Leave Management System, version 2.1. The vulnerability is a Cross Site Request Forgery in the manage-employee.php component that can allow a remote attacker to escalate privileges. The available connected documents confirm the issue and its impact b...

6.8AI score0.0007EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.24 views

PT-2026-1294

Name of the Vulnerable Software and Affected Versions Employee Leave Management System version 2.1 Description A Cross Site Request Forgery issue exists in Employee Leave Management System version 2.1. A remote attacker can potentially escalate privileges through the manage-employee.php component...

5.4CVSS5.9AI score0.0007EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/12/25 1:18 p.m.6 views

CVE-2023-53992

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ocb: don't leave if not joined If there's no OCB state, don't ask the driver/mac80211 to leave, since that's just confusing. Since set/clear the chandef state, that's a simple check...

5.5CVSS5.8AI score0.00173EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/12/25 12:58 a.m.4 views

SUSE CVE-2023-53992

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ocb: don't leave if not joined If there's no OCB state, don't ask the driver/mac80211 to leave, since that's just confusing. Since set/clear the chandef state, that's a simple check...

5.5CVSS6.5AI score0.00173EPSS
SaveExploits0References18
NVD
NVD
added 2025/12/24 11:15 a.m.4 views

CVE-2023-53992

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ocb: don't leave if not joined If there's no OCB state, don't ask the driver/mac80211 to leave, since that's just confusing. Since set/clear the chandef state, that's a simple check...

0.00173EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2025/12/24 11:15 a.m.5 views

CVE-2023-53992

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ocb: don't leave if not joined If there's no OCB state, don't ask the driver/mac80211 to leave, since that's just confusing. Since set/clear the chandef state, that's a simple check...

5.7AI score0.00173EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/24 10:55 a.m.42 views

CVE-2023-53992 wifi: cfg80211: ocb: don't leave if not joined

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ocb: don't leave if not joined If there's no OCB state, don't ask the driver/mac80211 to leave, since that's just confusing. Since set/clear the chandef state, that's a simple check...

0.00173EPSS
SaveExploits0References3
Rows per page
Query Builder