Lucene search
K

15 matches found

OSV
OSV
added 2025/04/28 5:15 p.m.1 views

CVE-2025-4029

A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by this issue is the function addrecord of the component New Record Handler. The manipulation of the argument filename leads to stack-based buffer overflow. Local access is require...

7.8CVSS5.9AI score0.00101EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/04/28 12:0 a.m.2 views

Code-Projects Personal Diary Management System 安全漏洞

Code-Projects Personal Diary Management System is an open source personal diary management system from Code-Projects. A security vulnerability exists in Code-Projects Personal Diary Management System version 1.0, which is caused by a stack buffer overflow due to incorrect manipulation of the...

7.8CVSS5.7AI score0.00101EPSS
Exploits1References5
NVD
NVD
added 2023/09/14 5:15 p.m.10 views

CVE-2023-36250

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...

7.8CVSS7.9AI score0.03602EPSS
Exploits1References1
OSV
OSV
added 2023/09/14 5:15 p.m.2 views

DEBIAN-CVE-2023-36250

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...

7.8CVSS8AI score0.03602EPSS
Exploits1References1
Prion
Prion
added 2023/09/14 5:15 p.m.16 views

Input validation

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...

4.4CVSS7.9AI score0.03602EPSS
Exploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2023/09/14 5:15 p.m.21 views

CVE-2023-36250

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...

7.8CVSS7.4AI score0.03602EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/09/14 12:0 a.m.19 views

CVE-2023-36250

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...

8.1AI score0.03602EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/09/02 12:0 a.m.3 views

PT-2023-25495 · Gnome +1 · Gnome Time Tracker +1

Name of the Vulnerable Software and Affected Versions: GNOME time tracker version 3.0.2 Description: The issue allows local attackers to execute arbitrary code via a crafted .tsv file when creating a new record. This is a result of a CSV Injection vulnerability in the GNOME time tracker...

7.8CVSS7.9AI score0.03602EPSS
Exploits1References17
OSV
OSV
added 2023/02/24 9:15 a.m.1 views

CVE-2023-1006

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suff...

5.4CVSS3.9AI score0.00102EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/02/24 8:21 a.m.10 views

CVE-2023-1006 SourceCodester Medical Certificate Generator App New Record cross site scripting

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suff...

4CVSS5.5AI score0.00102EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/02/24 12:0 a.m.2 views

PT-2023-16683 · Sourcecodester · Sourcecodester Medical Certificate Generator App

Name of the Vulnerable Software and Affected Versions: SourceCodester Medical Certificate Generator App version 1.0 Description: A problem was found in the New Record Handler component. The issue arises from the manipulation of arguments such as Firstname, Middlename, Lastname, Suffix, Nationalit...

5.4CVSS4.3AI score0.00102EPSS
Exploits0References4
OSV
OSV
added 2021/01/28 8:15 p.m.2 views

CVE-2020-36115

Stored Cross Site Scripting XSS vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'...

5.4CVSS5.3AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2021/01/28 8:15 p.m.2 views

CVE-2020-36115

Stored Cross Site Scripting XSS vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'...

5.4CVSS5.1AI score0.00181EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/01/28 7:15 p.m.14 views

CVE-2020-36115

Stored Cross Site Scripting XSS vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'...

5.3AI score0.00181EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/01/28 12:0 a.m.2 views

EGavilan Media CRUD Operation Cross-Site Scripting Vulnerability

EGavilan Media CRUD Operation is a Php-based website builder from EGavilan Media. A cross-site scripting vulnerability exists in EGavilan Media CRUD Operation, which originates from the "Add New Record Function" via the First Name or Last Name parameter...

5.4CVSS5.9AI score0.00181EPSS
Exploits1References2
Rows per page
Query Builder