Lucene search
K

6944 matches found

OSV
OSV
added 2025/01/06 5:15 p.m.0 views

UBUNTU-CVE-2024-56763

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracingcpumaskwrite If a large count is provided, it will trigger a warning in bitmapparseuser. Also check zero for it...

5.5CVSS6.2AI score0.00203EPSS
Exploits0References36
CNNVD
CNNVD
added 2025/01/06 12:0 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates in the tracing module that triggers a warning in bitmapparseuser when a large count value is supplied and there ...

5.5CVSS6.5AI score0.00203EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2025/01/04 12:0 a.m.3 views

The vulnerability of the fln_update() function in the _all_edits.php (/_parse/_all_edits.php) script of the Job Recruitment system allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the flnupdate function in the alledits.php /parse/alledits.php personnel recruitment system is related to the failure to take measures to neutralize special elements when processing the parameters fname and lname. Exploiting this vulnerability can allow an intruder to gain...

7.5CVSS7.6AI score0.00599EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/04 12:0 a.m.2 views

The vulnerability of the cn_update() function in the _all_edits.php script (/_parse/_all_edits.php) of the Job Recruitment system allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the cnupdate function in the alledits.php /parse/alledits.php personnel recruitment system is related to the failure to take measures to neutralize special elements when processing parameters urle and cname. Exploiting this vulnerability can allow an attacker, operating...

7.5CVSS7.6AI score0.00599EPSS
Exploits1References6Affected Software1
vulnersOsv
vulnersOsv
added 2025/01/02 12:52 p.m.7 views

@servable/manifest (>=1.15.0 <=1.34.1), @servable/parse-server-engine (>=1.0.2 <=1.9.2) +4 more potentially affected by CVE-2024-56198 via path-sanitizer (=2.0.0)

path-sanitizer NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on path-sanitizer and may be impacted: - @servable/manifest =1.15.0, =1.0.2, =1.0.0, =1.0.1, =1.0.2, =1.0.3 - generator-servable =1.14.0 Source cves: CVE-2024-56198 Source...

9.3CVSS7.4AI score0.00721EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2025-32538 · Unknown +1 · Nasm Netwide Assembler +1

Name of the Vulnerable Software and Affected Versions: NASM Netwide Assembler version 2.17rc0 Description: A flaw exists in the parse smacro template function within the preproc.c file. This issue leads to a null pointer dereference. Local access is required for exploitation. An exploit has been...

4.8CVSS3.4AI score0.00248EPSS
Exploits1References19
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2026-3064

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description The software contains an out-of-bounds read issue in the oggdmx parse tags function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

8.5CVSS6.5AI score0.00394EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.5 views

PT-2025-3758 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical vulnerability has been found in code-projects Job Recruitment, affecting an unknown part of the file / parse/ feedback system.php. The manipulation of the person argument leads...

7.5CVSS7.2AI score0.00535EPSS
Exploits1References17
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2025-32541 · Unknown +1 · Nasm Netwide Assembler +1

Name of the Vulnerable Software and Affected Versions: NASM Netwide Assembler version 2.17rc0 Description: A stack-based buffer overflow exists in the parse line function within the parser.c file. The issue is locally exploitable and has been publicly disclosed. Recommendations: At the moment,...

5.3CVSS5.2AI score0.00247EPSS
Exploits1References18
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.5 views

PT-2026-3089

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A heap overflow exists in the uncv parse config function. This issue can be triggered by processing a specially crafted MP4 file, potentially leading to a Denial of Service DoS. Recommendations Update to a newer...

5.5CVSS6.8AI score0.00188EPSS
Exploits1References5
OSV
OSV
added 2024/12/27 2:15 p.m.1 views

UBUNTU-CVE-2024-53189

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix bounds checker error in nl80211parseschedscan The channels array in the cfg80211scanrequest has a countedby attribute attached to it, which points to the nchannels variable. This attribute is used in bounds...

5.5CVSS6.5AI score0.00222EPSS
Exploits0References9
OSV
OSV
added 2024/12/27 12:32 p.m.2 views

OESA-2024-2583 tinyxml security update

TinyXML parses an XML document, and builds from that a Document Object Model DOM that can be read, modified, and saved. XML is a very structured and convenient format. All those random file formats created to store application data can all be replaced with XML. One parser for everything. Security...

7.5CVSS7AI score0.01372EPSS
Exploits0References2
OSV
OSV
added 2024/12/27 4:15 a.m.5 views

CVE-2024-12978

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. This vulnerability affects the function addreq of the file /parse/alledits.php. The manipulation of the argument jid/limit leads to sql injection. The attack can be initiated remotely. The exploit has...

7.5CVSS5.8AI score0.00669EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/12/27 12:0 a.m.3 views

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. Code-Projects Job Recruitment version 1.0 has an injection vulnerability that originates from the jid/limit parameter of the /parse/alledits.php file containing a SQL injection vulnerability...

7.5CVSS7.9AI score0.00669EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/12/27 12:0 a.m.3 views

PT-2024-17840 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical issue has been found in the function add req of the file / parse/ all edits.php. The manipulation of the argument jid/limit leads to SQL injection. The attack can be initiated...

7.5CVSS7.8AI score0.00669EPSS
Exploits1References12
Positive Technologies
Positive Technologies
added 2024/12/27 12:0 a.m.4 views

PT-2024-17843 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A problem has been found in the function fln update of the file / parse/ all edits.php. The manipulation of the arguments fname and lname leads to cross site scripting attacks. It is...

6.9CVSS4.7AI score0.00497EPSS
Exploits1References10
CNNVD
CNNVD
added 2024/12/27 12:0 a.m.2 views

Code-Projects Job Recruitment 代码注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. A code injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which originates from a cross-site scripting vulnerability in the fname/lname parameter of the /parse/alledits.php file...

6.9CVSS4.9AI score0.00497EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/12/27 12:0 a.m.6 views

PT-2024-17841 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A problem was found in the function cn update of the file / parse/ all edits.php. The manipulation of the argument cname leads to cross site scripting. The attack may be initiated remotel...

6.9CVSS4.6AI score0.00497EPSS
Exploits1References10
OSV
OSV
added 2024/12/26 9:15 p.m.2 views

CVE-2024-12966

A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function cnupdate of the file /parse/alledits.php. The manipulation of the argument cname/url leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00599EPSS
Exploits1References5
OSV
OSV
added 2024/12/26 7:15 p.m.2 views

CVE-2024-12962

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /parse/alledits.php. The manipulation of the argument skillset leads to sql injection. The attack can be launched remotely. The...

7.5CVSS5.8AI score0.006EPSS
Exploits1References5
Rows per page
Query Builder