Lucene search
+L

14944 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/19 11:2 p.m.6 views

CVE-2026-1193

A vulnerability was identified in MineAdmin 1.x/2.x. The impacted element is an unknown function of the file /system/cache/view of the component View Interface. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available a...

8.8CVSS5AI score0.0032EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/19 10:16 p.m.11 views

CVE-2026-1177

A weakness has been identified in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /kmf/savefolder.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument folderid can lead to sql injection. It is possible to launch the atta...

9.8CVSS5.7AI score0.00359EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/19 9:15 p.m.8 views

CVE-2026-1176

A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to...

9.8CVSS5.8AI score0.00333EPSS
SaveExploits1References5
NVD
NVD
added 2026/01/19 9:15 p.m.10 views

CVE-2026-1175

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...

7.5CVSS0.00417EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/19 9:2 p.m.29 views

CVE-2026-1176 itsourcecode School Management System index.php sql injection

A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to...

7.5CVSS0.00333EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/19 8:32 p.m.17 views

CVE-2026-1175

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...

7.5CVSS5AI score0.00417EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/01/19 8:32 p.m.9 views

CVE-2026-1175 birkir prime GraphQL Directive graphql information exposure

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...

6.9CVSS5.7AI score
SaveExploits0References7
EUVD
EUVD
added 2026/01/19 8:32 p.m.13 views

EUVD-2026-3194

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...

6.9CVSS5.1AI score0.00417EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/19 7:32 p.m.29 views

CVE-2026-1173 birkir prime GraphQL Array Based Query Batch graphql denial of service

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made...

6.9CVSS0.00678EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/19 7:32 p.m.28 views

CVE-2026-1173

CVE-2026-1173 affects the birkir prime project up to version 0.4.0.beta.0 , specifically the GraphQL Array Based Query Batch Handler’s unknown function in the /graphql file. The issue enables a remote denial of service and an exploit has been publicly disclosed. Remediation: upgrade to a version ...

9.8CVSS5.2AI score0.00678EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2026/01/19 6:16 p.m.10 views

CVE-2026-1170

A vulnerability was detected in birkir prime up to 0.4.0.beta.0. This issue affects some unknown processing of the file /graphql of the component GraphQL API. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit is now public and may be...

6.9CVSS0.00367EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/01/19 6:2 p.m.13 views

EUVD-2026-3203

A vulnerability was detected in birkir prime up to 0.4.0.beta.0. This issue affects some unknown processing of the file /graphql of the component GraphQL API. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit is now public and may be...

6.9CVSS5.3AI score0.00367EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/19 6:2 p.m.33 views

CVE-2026-1170

The CVE-2026-1170 affects birkir prime before 0.4.0.beta.0, specifically the GraphQL API’s /graphql processing. Technical details in connected sources show that manipulating the GraphQL file can disclose information remotely. Public exploit activity is indicated, and multiple risk datasets (inclu...

6.9CVSS5.3AI score0.00367EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/19 6:2 p.m.14 views

CVE-2026-1170

A vulnerability was detected in birkir prime up to 0.4.0.beta.0. This issue affects some unknown processing of the file /graphql of the component GraphQL API. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit is now public and may be...

6.9CVSS5.1AI score0.00367EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2026/01/19 5:32 p.m.10 views

EUVD-2026-3205

A security vulnerability has been detected in birkir prime up to 0.4.0.beta.0. This vulnerability affects unknown code. Such manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of...

5.3CVSS5AI score0.00197EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/19 5:32 p.m.6 views

CVE-2026-1169 birkir prime cross-site request forgery

A security vulnerability has been detected in birkir prime up to 0.4.0.beta.0. This vulnerability affects unknown code. Such manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of...

5.3CVSS4.7AI score0.00197EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/01/19 4:17 p.m.9 views

CVE-2026-1124

A security flaw has been discovered in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/workreport.jsp of the component HTTP GET Parameter Handler. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the...

9.8CVSS5.4AI score0.00414EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/19 4:2 p.m.31 views

CVE-2026-1161 pbrong hrms recruitment.go UpdateRecruitmentById cross site scripting

A vulnerability was detected in pbrong hrms 1.0.1. The affected element is the function UpdateRecruitmentById of the file /handler/recruitment.go. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

5.1CVSS0.00191EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/19 4:2 p.m.26 views

CVE-2026-1161

CVE-2026-1161 affects pbrong hrms 1.0.1 in file /handler/recruitment.go, UpdateRecruitmentById. Description indicates an input manipulation that enables cross-site scripting, exploitable remotely, with the exploit public. No specific remediation is provided in the connected documents. CVSS metric...

5.1CVSS3.9AI score0.00191EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/19 4:2 p.m.9 views

EUVD-2026-3212

A vulnerability was detected in pbrong hrms 1.0.1. The affected element is the function UpdateRecruitmentById of the file /handler/recruitment.go. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

5.1CVSS3.9AI score0.00191EPSS
SaveExploits0References5
Rows per page
Query Builder