Lucene search
+L

12 matches found

CNNVD
CNNVD
added 2026/03/23 12:0 a.m.13 views

PHPGurukul Vehicle Record Management System 安全漏洞

PHPGurukul Vehicle Record Management System is a vehicle record management system developed by PHPGurukul Corporation. Version 1.0 of the Phpgurukul Vehicle Record Management System contains a security vulnerability. This vulnerability arises from improper handling of the Mobile Number parameter...

4.8CVSS5.6AI score0.00184EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/01/27 3:23 p.m.20 views

CVE-2020-36940 Easy CD & DVD Cover Creator 4.13 - Denial of Service

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...

9.8CVSS6.1AI score0.00245EPSS
Exploits0References2
CVE
CVE
added 2026/01/27 3:23 p.m.12 views

CVE-2020-36940

CVE-2020-36940 affects Easy CD & DVD Cover Creator 4.13. A buffer overflow in the serial-number input field can crash the application when a ~6000-byte payload is pasted. The issue has PoC/exploit references in public material; no remediation is provided in the supplied documents. The CVSS data i...

9.8CVSS6.1AI score0.00245EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/27 3:23 p.m.5 views

CVE-2020-36940

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...

9.8CVSS6.1AI score0.00245EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.6 views

PT-2026-4922

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...

9.8CVSS6.1AI score0.00245EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.7 views

PHPGurukul Billing System 安全漏洞

Billing System is a billing system. The Billing System suffers from a SQL injection vulnerability that stems from the username and mobileno parameters in the /admin/password-recovery.php endpoint not validating user input. An attacker can use this vulnerability to steal, tamper, or delete sensiti...

6.5CVSS7.6AI score0.00179EPSS
Exploits0References3
NVD
NVD
added 2025/09/19 3:15 a.m.7 views

CVE-2025-59715

SMSEagle before 6.11 allows reflected XSS via a username or contact phone number...

5.4CVSS0.00178EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/24 12:0 a.m.5 views

PT-2025-22833

Name of the Vulnerable Software and Affected Versions scsir crate version 0.2.0 Description The issue arises from an overflow in the group number due to a potential mismatch between the expected number of bits by a hardware device, typically a small number such as 5 bits, and the actual value...

9.8CVSS5.9AI score0.00276EPSS
Exploits1References9
NVD
NVD
added 2023/10/22 11:15 p.m.26 views

CVE-2023-5696

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file pagestransfermoney.php. The manipulation of the argument accountnumber with the input 357146928--alert9206!-- leads to cross site...

6.1CVSS4.4AI score0.00472EPSS
Exploits1References3
Snyk
Snyk
added 2022/09/08 11:24 a.m.6 views

Malicious Package

Overview serial-number-input is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

9.8CVSS7.1AI score
Exploits0References3
OSV
OSV
added 2022/08/05 9:15 p.m.5 views

CVE-2022-2684

A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /manage-apartment.php. The manipulation of the argument Apartment Number with the input alert1 leads to cross site scripting...

5.4CVSS3.8AI score0.00556EPSS
Exploits1References2
OSV
OSV
added 2020/12/03 9:15 p.m.2 views

DEBIAN-CVE-2018-21270

Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream when using Node.js 4.x...

6.5CVSS6.9AI score0.03638EPSS
Exploits1References1
Rows per page
Query Builder