Lucene search
+L

703 matches found

CNNVD
CNNVD
added 2025/04/04 12:0 a.m.7 views

CodeAstro Car Rental System 安全漏洞

CodeAstro Car Rental System is a car rental system from CodeAstro. A security vulnerability exists in CodeAstro Car Rental System version 1.0, which stems from an incorrect manipulation of the parameter ID that can lead to SQL injection...

9.8CVSS6.9AI score0.00449EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.6 views

Online Medicine Ordering System 安全漏洞

Online Medicine Ordering System is an online medicine ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Online Medicine Ordering System version 1.0, which stems from an incorrect manipulation of a parameter ID that can lead to SQL injection...

9.8CVSS6.9AI score0.0051EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/04/02 4:28 a.m.24 views

CVE-2025-3013

Insecure Direct Object References IDOR in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

8.3CVSS7.1AI score0.00298EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/02 12:0 a.m.9 views

SourceCodester Online Tutor Portal 注入漏洞

SourceCodester Online Tutor Portal is a SourceCodester open source online tutor portal. An injection vulnerability exists in SourceCodester Online Tutor Portal version 1.0, which stems from the fact that incorrect manipulation of a parameter ID can lead to SQL injection...

9.8CVSS7.1AI score0.0051EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2025/04/02 12:0 a.m.11 views

Shibboleth < 3.5.0.1 Forged Messages

The version of Shibboleth Service Provider installed on the remote is prior to 3.5.0.1. It is, therefore, affected by a vulnerability. The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS5.2AI score0.00228EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/31 4:15 a.m.24 views

CVE-2025-3014

Insecure Direct Object References IDOR in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

8.3CVSS0.00298EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.7 views

Jinher OA C6 安全漏洞

Jinher OA C6 is a digital office platform from Jinher China. A security vulnerability exists in Jinher OA C6, which stems from an incorrect manipulation of a parameter ID that can lead to SQL injection...

6.5CVSS6.8AI score0.00309EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/03/29 3:2 a.m.8 views

SUSE CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS7AI score0.00228EPSS
SaveExploits0References7
NVD
NVD
added 2025/03/28 6:15 a.m.37 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS0.00228EPSS
SaveExploits0References4
OSV
OSV
added 2025/03/28 6:15 a.m.17 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

7.2AI score
SaveExploits0References4
OSV
OSV
added 2025/03/28 6:15 a.m.5 views

DEBIAN-CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS4.8AI score0.00228EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/28 6:15 a.m.9 views

UBUNTU-CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS5.7AI score0.00228EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2025/03/28 12:0 a.m.7 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS7.2AI score0.00228EPSS
SaveExploits0References4
CVE
CVE
added 2025/03/28 12:0 a.m.87 views

CVE-2025-31335

CVE-2025-31335 affects the OpenSAML C++ library prior to 3.3.1, where parameter manipulation can forge signed SAML messages for bindings that rely on non-XML signatures. The issue is confirmed in multiple feeds referencing OpenSAML

4CVSS4.5AI score0.00228EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/03/28 12:0 a.m.39 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS0.00228EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.14 views

SourceCodester Online Eyewear Shop 注入漏洞

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for the eyewear business and its potential customers. An injection vulnerability exists in SourceCodester...

9.8CVSS8AI score0.00584EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.10 views

Food Ordering Management System 安全漏洞

Food Ordering Management System is a food ordering management system by the individual developer Carlo Montero. It provides an online platform to order food from a restaurant or fast food chain. A security vulnerability exists in Food Ordering Management System version 1.0 and prior versions, whi...

5.8CVSS5.6AI score0.00376EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/03/23 12:0 a.m.6 views

SourceCodester AC Repair and Services System 注入漏洞

SourceCodester AC Repair and Services System is a SourceCodester open source air conditioning repair and services system. An injection vulnerability exists in SourceCodester AC Repair and Services System version 1.0, which stems from the fact that incorrect manipulation of a parameter ID can lead...

9.8CVSS8AI score0.00527EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/03/23 12:0 a.m.5 views

SourceCodester AC Repair and Services System 注入漏洞

SourceCodester AC Repair and Services System is a SourceCodester open source air conditioning repair and services system. An injection vulnerability exists in SourceCodester AC Repair and Services System version 1.0, which stems from the fact that incorrect manipulation of a parameter ID can lead...

9.8CVSS7.9AI score0.00547EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/03/17 12:0 a.m.11 views

Code-Projects Online Class and Exam Scheduling System 安全漏洞

Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects open source. A security vulnerability exists in Code-Projects Online Class and Exam Scheduling System version V1.0, which stems from an incorrect manipulation of the parameters...

5.9CVSS6.2AI score0.00258EPSS
SaveExploits1References2
Rows per page
Query Builder