Lucene search
+L

2079 matches found

OSV
OSV
•added 2026/04/08 5:53 a.m.•17 views

CVE-2026-5083 Ado::Sessions versions through 0.935 for Perl generates insecure session ids

Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked fr...

5.3CVSS5.8AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/04/08 12:00 a.m.•6 views

CVE-2025-50657

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the pid parameter in the /trace.asp endpoint...

7.4AI score0.00516EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•16 views

PT-2026-31381

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of the pid parameter in the /trace.asp endpoint. Recommendations Update to a newer version that contains a fix for this vulnerability. As a tempora...

7.8CVSS7.4AI score0.00516EPSS
SaveExploits0References8
CVE
CVE
•added 2026/04/08 12:00 a.m.•31 views

CVE-2025-50657

A stack-based buffer overflow vulnerability exists in the D-Link DI-8003 wireless router (firmware version 16.07.26A1 ). The flaw is caused by the improper handling of the pid parameter within the /trace.asp endpoint. A malicious actor can exploit this vulnerability by sending a specially crafted...

7.5CVSS7.4AI score0.00516EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•22 views

D-Link DI-8003 安全漏洞

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability that originates from improper handling of the pid parameter in the /trace.asp endpoint, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.00516EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•2 views

CVE-2025-50657: Stack-based Buffer Overflow

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the pid parameter in the /trace.asp endpoint...

7.5CVSS7.5AI score0.00516EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/04/06 10:57 a.m.•16 views

CVE-2026-5552

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/05 9:30 a.m.•17 views

EUVD-2026-19052

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS5.7AI score0.00316EPSS
SaveExploits0References6
NVD
NVD
•added 2026/04/05 9:16 a.m.•16 views

CVE-2026-5552

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS0.00316EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/05 8:30 a.m.•7 views

CVE-2026-5552

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS5.7AI score0.00316EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/05 8:30 a.m.•11 views

CVE-2026-5552 PHPGurukul Online Shopping Portal Project Parameter sub-category.php sql injection

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/05 8:30 a.m.•29 views

CVE-2026-5552

CVE-2026-5552 concerns a SQL injection in PHPGurukul Online Shopping Portal Project 2.1. The issue is tied to the Parameter Handler component, specifically the file /sub-category.php where manipulation of the pid argument enables SQL injection. Remote exploitation is described as possible, and pu...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/05 12:00 a.m.•19 views

PHPGurukul Online Shopping Portal Project SQL注入漏洞

The PHPGurukul Online Shopping Portal Project is an online shopping portal project of PHPGurukul Corporation. Version 2.1 of the PHPGurukul Online Shopping Portal Project has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “pid” in the...

6.5CVSS6.7AI score0.00316EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•2 views

CVE-2026-5552: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/03/17 12:00 a.m.•39 views

EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-1490)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : tcpbpf: Call skmsgfree when tcpbpfsendverdict fails to allocate psock-cork.CVE-2025-39913 md: fix rcu protection in...

10CVSS6.3AI score0.08793EPSS
SaveExploits28References497
Tenable Nessus
Tenable Nessus
•added 2026/03/16 12:00 a.m.•26 views

EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2026-1537)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : media: v4l2-mem2mem: add lock to protect parameter numrdyCVE-2023-53519 md: Replace snprintf with scnprintfCVE-2022-50299 mm/vmscan...

9.8CVSS6.2AI score0.00954EPSS
SaveExploits3References99
Tenable Nessus
Tenable Nessus
•added 2026/03/16 12:00 a.m.•30 views

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1397)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : tcpbpf: Call skmsgfree when tcpbpfsendverdict fails to allocate psock-cork.CVE-2025-39913 md: fix rcu protection in mdwakeupthreadCVE-2025-68374...

9.8CVSS6.3AI score0.00693EPSS
SaveExploits8References234
Tenable Nessus
Tenable Nessus
•added 2026/03/16 12:00 a.m.•39 views

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1366)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : tcpbpf: Call skmsgfree when tcpbpfsendverdict fails to allocate psock-cork.CVE-2025-39913 md: fix rcu protection in mdwakeupthreadCVE-2025-68374...

9.8CVSS6.3AI score0.00693EPSS
SaveExploits8References234
RedhatCVE
RedhatCVE
•added 2026/03/06 7:55 a.m.•16 views

CVE-2025-40931

Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id. Apache::Session::Generate::MD5 generates session ids insecurely. The default session id generator returns a MD5 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come fro...

9.1CVSS5.8AI score0.00594EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/05 1:41 a.m.•10 views

CVE-2025-40931

Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id. Apache::Session::Generate::MD5 generates session ids insecurely. The default session id generator returns a MD5 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come fro...

9.1CVSS5.8AI score0.00594EPSS
SaveExploits0References10
Rows per page
Query Builder