Lucene search
+L

34466 matches found

Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•4 views

PT-2026-99741

Name of the Vulnerable Software and Affected Versions mathurvishal CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description Remote SQL injection is possible due to improper processing of the gname argument within the 'updateguest.php' file. SQL injection is a...

6.5CVSS5.6AI score0.00303EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•8 views

CVE-2026-101016: Improper Handling of Exceptional Conditions

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcpolicyparsedmarc in the library libopendmarc/opendmarcpolicy.c. The manipulation of the argument fo/rf/ri/pct/sp/adkim/aspf/rua/ruf leads to handling of exceptional conditions. Remot...

6.9CVSS6.1AI score0.00324EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•4 views

PT-2026-99797

Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project affected versions not specified Description A remote SQL injection is possible due to improper handling of the editid argument within an unknown function in the updateresultdetails.php file. SQL injection is a...

7.5CVSS5.8AI score0.00254EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•7 views

PT-2026-99816

Name of the Vulnerable Software and Affected Versions Trusted Domain Project OpenDMARC versions prior to 1.4.3 Description An issue exists in the opendmarc policy parse dmarc function within the libopendmarc/opendmarc policy.c library. Remote exploitation is possible through the manipulation of t...

6.9CVSS6.5AI score0.00324EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•8 views

CVE-2026-100898: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of the file app/Filament/Widgets/Timesheet/ActivitiesReport.php of the component Timesheet Dashboard. Performing a manipulation of the argument filter results in...

6.5CVSS5.8AI score0.00192EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•6 views

PT-2026-99755

Name of the Vulnerable Software and Affected Versions DevaslanPHP project-management versions 1.2.1 through 1.2.4 DevaslanPHP project-management version v2.0.0-beta1 Description A remote SQL injection exists in the Timesheet Dashboard component within the whereRaw function of the...

6.5CVSS6.1AI score0.00192EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•6 views

PT-2026-99754

Name of the Vulnerable Software and Affected Versions DevaslanPHP project-management versions 1.2.1 through 1.2.4 DevaslanPHP project-management version 2.0.0-beta1 Description Remote SQL injection is possible within the Timesheet Dashboard component. The issue exists in the whereRaw function...

6.5CVSS6.1AI score0.00192EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•4 views

PT-2026-99817

Name of the Vulnerable Software and Affected Versions Trusted Domain Project OpenDMARC versions prior to 1.4.3 Description A remote attack is possible due to the improper handling of exceptional conditions within the strcasecmp function located in the libopendmarc/opendmarc policy.c library...

6.9CVSS6.6AI score0.00324EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•7 views

CVE-2026-101017: Improper Handling of Exceptional Conditions

A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strcasecmp in the library libopendmarc/opendmarcpolicy.c. The manipulation results in handling of exceptional conditions. The attack can be executed remotely. The exploit has been ma...

6.9CVSS6.1AI score0.00324EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•6 views

PT-2026-99807

Name of the Vulnerable Software and Affected Versions Trusted Domain Project OpenDMARC versions prior to 1.4.3 Description A flaw exists in the Domain Handler component within the policy.c file. A remote attacker can perform a manipulation that leads to improper validation of unsafe equivalence i...

7.5CVSS7AI score0.00293EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•8 views

CVE-2026-100889: Off-by-one Error

A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkimqpdecode of the file util.c of the component Decoder. The manipulation results in off-by-one. The attack may be performed from remote. The exploit is now public and may be used. The vendor w...

7.5CVSS6.7AI score0.003EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•7 views

CVE-2026-100894: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This issue affects some unknown processing of the file updateguest.php. The manipulation of the argument gname leads to sql injection. The attack may be initiated remotely. Th...

6.5CVSS5.7AI score0.00303EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•10 views

CVE-2026-100891: Encoding Error

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

7.5CVSS6.6AI score0.00293EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•9 views

CVE-2026-101015: Improper Validation of Unsafe Equivalence in Input

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is some unknown functionality of the file policy.c of the component Domain Handler. Executing a manipulation can lead to improper validation of unsafe equivalence in input. The attack may be launched...

7.5CVSS6.6AI score0.00293EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•8 views

CVE-2026-100895: NULL Pointer Dereference

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arcparsecanont in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploi...

6.9CVSS5AI score0.00671EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•7 views

PT-2026-99756

Name of the Vulnerable Software and Affected Versions DevaslanPHP project-management versions 1.2.1 through 1.2.4 DevaslanPHP project-management version v2.0.0-beta1 Description In the Jira Import component, the updateJiraProjects function within the /jira-import file is susceptible to server-sid...

6.5CVSS5.8AI score0.00155EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•9 views

CVE-2026-101014: Off-by-one Error

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcutilcleanup in the library libopendmarc/opendmarcutil.c of the component DMARC Record Parser. Performing a manipulation results in off-by-one. The attack may be...

7.5CVSS6.6AI score0.00314EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/27 11:45 p.m.•33 views

CVE-2026-100889

A vulnerability exists in Trusted Domain Project OpenDKIM up to version 2.11.0 . The issue is caused by an off-by-one error in the dkim_qp_decode function within the util.c file of the Decoder component. This flaw can be triggered via a remote attack. While the documents confirm that an exploit i...

7.5CVSS6.7AI score0.003EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/27 11:45 p.m.•8 views

CVE-2026-100889 Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one

A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkimqpdecode of the file util.c of the component Decoder. The manipulation results in off-by-one. The attack may be performed from remote. The exploit is now public and may be used. The vendor w...

7.5CVSS6.7AI score0.003EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/27 11:45 p.m.•50 views

CVE-2026-100889 Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one

A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkimqpdecode of the file util.c of the component Decoder. The manipulation results in off-by-one. The attack may be performed from remote. The exploit is now public and may be used. The vendor w...

7.5CVSS0.003EPSS
SaveExploits0References5
Rows per page
Query Builder