Lucene search
K

8 matches found

CNNVD
CNNVD
added 2026/04/30 12:0 a.m.4 views

MCP Server Semgrep 命令注入漏洞

MCP Server Semgrep is an AI assistant tool for integrated static code analysis, open-sourced by VetCoders. Version 1.0.0 of MCP Server Semgrep contains a command injection vulnerability. This vulnerability stems from the handling of parameter IDs in the...

7.5CVSS7.2AI score0.01738EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.2 views

SourceCodester Pharmacy Sales and Inventory System 跨站脚本漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System contains a cross-site scripting vulnerability. This vulnerability stems from the...

4.8CVSS5.6AI score0.00039EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/08 12:0 a.m.2 views

Code-Projects Contact Management System 授权问题漏洞

Code-Projects Contact Management System is an open-source contact management system developed by Code-Projects. Version 1.0 of the Code-Projects Contact Management System has a vulnerability related to authorization issues. This vulnerability stems from incorrect handling of parameter IDs, which...

9.8CVSS7.1AI score0.00038EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/01/20 12:0 a.m.1 views

MineAdmin Access Control Vulnerability

MineAdmin is an open-source permission management system developed by MineAdmin. Versions 1.x and 2.x of MineAdmin contain access control vulnerabilities. These vulnerabilities stem from incorrect operations with parameter IDs in files/systems and getFileInfoById, which may lead to information...

5.3CVSS5.8AI score0.0005EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/01/20 12:0 a.m.2 views

MineAdmin Access Control Vulnerability

MineAdmin is an open-source permission management system developed by MineAdmin. Versions 1.x and 2.x of MineAdmin contain access control vulnerabilities. These vulnerabilities stem from incorrect operations with parameter IDs in files/systems/downloadById, which may lead to information leaks...

3.1CVSS5.8AI score0.00013EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/08/21 12:0 a.m.17 views

XXL-JOB 安全漏洞

XXL-JOB is a distributed task scheduling platform by the individual developer Xu Xueli xuxueli. A security vulnerability exists in XXL-JOB 3.1.1 and earlier versions, which stems from incorrect manipulation of parameter IDs, resulting in improper control of resource identifiers...

5.5CVSS5.5AI score0.00095EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/07/07 12:0 a.m.1 views

CampCodes Payroll Management System 安全漏洞

CampCodes Payroll Management System is a payroll management system from CampCodes Philippines. A security vulnerability exists in CampCodes Payroll Management System version 1.0, which stems from improper handling of parameter IDs in the file /ajax.php, which could lead to a SQL injection attack...

9.8CVSS7.8AI score0.00277EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/04/07 12:0 a.m.3 views

Online Restaurant Management System 注入漏洞

Online Restaurant Management System is a Code-projects open source online restaurant management system. An injection vulnerability exists in Online Restaurant Management System version 1.0, which originates from improper handling of parameter IDs in the /admin/userupdate.php file, which can lead ...

9.8CVSS7.8AI score0.0011EPSS
Exploits1References5
Rows per page
Query Builder