Lucene search
+L

1344 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•1 views

CVE-2025-7153: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in CodeAstro Simple Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /doctor.html of the component POST Parameter Handler. The manipulation of the argument First Name/Last name/Address leads ...

5.4CVSS3.8AI score0.00307EPSS
SaveExploits1References1
OSV
OSV
•added 2025/07/07 10:15 p.m.•11 views

CVE-2025-7148

A vulnerability was found in CodeAstro Simple Hospital Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /patient.html of the component POST Parameter Handler. The manipulation leads to cross site scripting. The attack may be...

5.4CVSS3.8AI score0.00307EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•1 views

CVE-2025-7148: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CodeAstro Simple Hospital Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /patient.html of the component POST Parameter Handler. The manipulation leads to cross site scripting. The attack may be...

5.4CVSS3.7AI score0.00307EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/18 5:18 p.m.•15 views

CVE-2025-6131

A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site...

4.8CVSS3.4AI score0.00342EPSS
SaveExploits1References1
NVD
NVD
•added 2025/06/16 5:15 p.m.•25 views

CVE-2025-6131

A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site...

4.8CVSS0.00342EPSS
SaveExploits1References5
OSV
OSV
•added 2025/06/16 5:15 p.m.•14 views

CVE-2025-6131

A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site...

4.8CVSS3.8AI score0.00342EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/16 12:00 a.m.•3 views

CVE-2025-6131: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site...

4.8CVSS4AI score0.00342EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/11 7:20 a.m.•13 views

CVE-2025-5865

A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sysselect of the file rt-thread/components/lwp/lwpsyscall.c of the component Parameter Handler. The manipulation of the argument timeout leads to memory corruption. The vendor...

9.8CVSS7.6AI score0.00983EPSS
SaveExploits1References1
CVE
CVE
•added 2025/06/09 6:31 a.m.•85 views

CVE-2025-5865

RT-Thread 5.1.0 is affected by CVE-2025-5865 in the Parameter Handler’s lwp_syscall.c sys_select function. The timeout argument manipulation can cause memory corruption, per multiple sources. The vendor recommends validating the timeout parameter to ensure correct kernel-mode access and temporary...

9.8CVSS7.7AI score0.00983EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/09 12:00 a.m.•1 views

CVE-2025-5865: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sysselect of the file rt-thread/components/lwp/lwpsyscall.c of the component Parameter Handler. The manipulation of the argument timeout leads to memory corruption. The vendor...

9.8CVSS7AI score0.00983EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/06 10:12 a.m.•33 views

CVE-2025-5584

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as problematic. Affected is an unknown function of the file /doctor/edit-patient.php?editid=2 of the component POST Parameter Handler. The manipulation of the argument patname leads to cross site...

5.4CVSS6.2AI score0.00327EPSS
SaveExploits1References1
NVD
NVD
•added 2025/06/04 10:15 a.m.•16 views

CVE-2025-5584

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as problematic. Affected is an unknown function of the file /doctor/edit-patient.php?editid=2 of the component POST Parameter Handler. The manipulation of the argument patname leads to cross site...

5.4CVSS0.00327EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/06/04 10:00 a.m.•32 views

CVE-2025-5584 PHPGurukul Hospital Management System POST Parameter edit-patient.php cross site scripting

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as problematic. Affected is an unknown function of the file /doctor/edit-patient.php?editid=2 of the component POST Parameter Handler. The manipulation of the argument patname leads to cross site...

4.8CVSS0.00327EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/04 12:00 a.m.•2 views

CVE-2025-5584: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as problematic. Affected is an unknown function of the file /doctor/edit-patient.php?editid=2 of the component POST Parameter Handler. The manipulation of the argument patname leads to cross site...

5.4CVSS3.6AI score0.00327EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/03 5:19 p.m.•17 views

CVE-2025-5404

A vulnerability classified as problematic was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This vulnerability affects unknown code of the file /search.php of the component GET Parameter Handler. The manipulation of the argument Search leads to denial of service...

5.3CVSS6.9AI score0.00844EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/03 9:16 a.m.•13 views

CVE-2025-5400

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been classified as critical. Affected is an unknown function of the file /user.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. It is...

7.5CVSS7.2AI score0.00574EPSS
SaveExploits1References1
NVD
NVD
•added 2025/06/01 5:15 p.m.•19 views

CVE-2025-5404

A vulnerability classified as problematic was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This vulnerability affects unknown code of the file /search.php of the component GET Parameter Handler. The manipulation of the argument Search leads to denial of service...

7.5CVSS0.00844EPSS
SaveExploits1References4
CVE
CVE
•added 2025/06/01 4:00 p.m.•80 views

CVE-2025-5403

CVE-2025-5403 affects chaitak-gorai Blogbook. Vulnerability exists in the GET Parameter Handler, specifically the post_id argument in /admin/view_all_posts.php, where manipulation leads to SQL injection. Exploitation can be remote; public exploit has been disclosed. Affected releases are unknown ...

8.8CVSS7.3AI score0.00474EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2025/06/01 2:15 p.m.•53 views

CVE-2025-5402

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/includes/editpost.php of the component GET Parameter Handler. The manipulation of the argument...

9.8CVSS0.00581EPSS
SaveExploits1References4
CVE
CVE
•added 2025/06/01 2:00 p.m.•73 views

CVE-2025-5402

CVE-2025-5402 affects chaitak-gorai Blogbook. The vulnerable component is the GET Parameter Handler in the file /admin/includes/edit_post.php, where manipulating the edit_post_id parameter leads to SQL injection. Exploitation is described as possible remotely and publicly disclosed. Several sourc...

9.8CVSS7.4AI score0.00581EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder