Lucene search
+L

2209 matches found

CNNVD
CNNVD
•added 2025/07/14 12:00 a.m.•18 views

SEMCMS 安全漏洞

SEMCMS is SEMCMS open source content management system CMS for foreign trade websites that support multi-language. A security vulnerability exists in SEMCMS v5.0, which originates from SQL injection of the pid parameter in SEMCMSQuanxian.php...

5.4CVSS7.9AI score0.00242EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/14 12:00 a.m.•4 views

CVE-2025-51653: Improper Neutralization of Special Elements used in an SQL Command

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSct.php...

5.4CVSS5.8AI score0.00242EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/07/14 12:00 a.m.•19 views

SEMCMS 安全漏洞

SEMCMS is SEMCMS open source content management system CMS for foreign trade websites that supports multi-language. A security vulnerability exists in SEMCMS v5.0, which originates from SQL injection of the pid parameter in SEMCMSCategories.php...

5.4CVSS7.9AI score0.00242EPSS
SaveExploits1References4
CNVD
CNVD
•added 2025/06/27 12:00 a.m.•16 views

Online Shoe Store admin_product.php File SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter pid in the file /admin/adminproduct.php. An attacker can exploit this vulnerability to...

9.8CVSS7.9AI score0.00514EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/25 12:00 a.m.•43 views

PT-2026-52559

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A use-after-free issue exists in the gf filter pid inst swap function located in /filter core/filter pid.c. A use-after-free occurs when a program continues to use a pointer after it ha...

6.1CVSS5.8AI score0.00187EPSS
SaveExploits1References23
Positive Technologies
Positive Technologies
•added 2025/06/25 12:00 a.m.•44 views

PT-2026-52139

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A use-after-free issue exists in the gf filter pid get packet function located in /filter core/filter pid.c. This occurs when the software processes a specially crafted media file, whic...

5CVSS5.7AI score0.00162EPSS
SaveExploits1References23
Positive Technologies
Positive Technologies
•added 2025/06/24 12:00 a.m.•24 views

PT-2026-52127

Name of the Vulnerable Software and Affected Versions MP4Box version 2.5-DEV-rev1593-gfe88c3545-master Description A heap use-after-free occurs when the gf filter pid inst swap delete task function in the filter core/filter pid.c component improperly accesses objects after they have been freed...

5.5CVSS5.8AI score0.0017EPSS
SaveExploits1References20
Positive Technologies
Positive Technologies
•added 2025/06/24 12:00 a.m.•33 views

PT-2026-52037

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A use-after-free issue exists in the gf filter pid reconfigure task discard function located in /filter core/filter pid.c. A use-after-free occurs when a program continues to use a...

5.5CVSS5.7AI score0.00183EPSS
SaveExploits1References22
CNNVD
CNNVD
•added 2025/06/22 12:00 a.m.•24 views

Code-Projects Online Shopping Store 安全漏洞

Code-Projects Online Shopping Store is a Code-Projects open source online store. A security vulnerability exists in Code-Projects Online Shopping Store version 1.0, which originates from SQL injection due to incorrect manipulation of the parameters catid/brandid/keyword/proId/pid in file/action.p...

7.2CVSS5.6AI score0.00525EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/22 12:00 a.m.•4 views

CVE-2025-6484: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument catid/brandid/keyword/proId/pid leads to sql injection. The attack may be launched...

7.2CVSS5.5AI score0.00525EPSS
SaveExploits1References1
OSV
OSV
•added 2025/06/20 2:15 p.m.•13 views

CVE-2025-6343

A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/adminproduct.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.7AI score0.00514EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/20 12:00 a.m.•12 views

Code-Projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter pid in the file /admin/adminproduct.php. An attacker can exploit this vulnerability to...

9.8CVSS8.2AI score0.00514EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/20 12:00 a.m.•3 views

CVE-2025-6343: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/adminproduct.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.00514EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/20 12:00 a.m.•3 views

CVE-2025-6342: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. This issue affects some unknown processing of the file /admin/adminfootball.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS5.5AI score0.00514EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/20 12:00 a.m.•10 views

code-projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter pid in the file /admin/adminfootball.php. The vulnerability can be exploited to execute...

9.8CVSS8.2AI score0.00514EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/06/01 5:50 p.m.•16 views

CVE-2025-5054

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS6.1AI score0.00757EPSS
SaveExploits2References1
OSV
OSV
•added 2025/05/30 6:15 p.m.•15 views

CVE-2025-5054

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS5.7AI score0.00757EPSS
SaveExploits2References4
NVD
NVD
•added 2025/05/30 6:15 p.m.•27 views

CVE-2025-5054

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS0.00757EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
•added 2025/05/30 5:37 p.m.•12 views

CVE-2025-5054 Race Condition in Canonical Apport

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS4.4AI score0.00757EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2025/05/30 5:37 p.m.•73 views

CVE-2025-5054 Race Condition in Canonical Apport

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS0.00757EPSS
SaveExploits2References3
Rows per page
Query Builder