Lucene search
+L

3642 matches found

NVD
NVD
added 2025/01/09 7:15 a.m.29 views

CVE-2025-0340

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

9.8CVSS0.00639EPSS
SaveExploits0References4
OSV
OSV
added 2025/01/09 7:15 a.m.9 views

CVE-2025-0340

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

9.8CVSS5.8AI score0.00639EPSS
SaveExploits0References4
CVE
CVE
added 2025/01/09 7:00 a.m.66 views

CVE-2025-0340

CVE-2025-0340 affects code-projects Cinema Seat Reservation System 1.0, impacting the /admin/deleteBooking.php functionality. The root cause is an SQL injection triggered by manipulating the id argument, with the vulnerability exploitable remotely and the exploit publicly disclosed. A range of so...

9.8CVSS7.6AI score0.00639EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2025/01/09 7:00 a.m.46 views

CVE-2025-0340 code-projects Cinema Seat Reservation System deleteBooking.php sql injection

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

7.5CVSS0.00639EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/01/09 7:00 a.m.11 views

CVE-2025-0340 code-projects Cinema Seat Reservation System deleteBooking.php sql injection

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

7.5CVSS7.4AI score0.00639EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/09 12:00 a.m.10 views

PT-2025-3835 · Code Projects · Cinema Seat Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Cinema Seat Reservation System version 1.0 Description: A critical issue has been found in the Cinema Seat Reservation System. It affects an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the id...

9.8CVSS7.8AI score0.00639EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.9 views

Code-Projects Cinema Seat Reservation System 注入漏洞

Code-Projects Cinema Seat Reservation System is a Code-Projects open source movie theater seat reservation system. An injection vulnerability exists in Code-Projects Cinema Seat Reservation System version 1.0, which is caused by an SQL injection into the parameter id...

9.8CVSS7.9AI score0.00639EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.8 views

WordPress plugin Bus Ticket Booking with Seat Reservation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS8.3AI score0.00183EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/06 1:15 p.m.7 views

WordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin Bus Ticket Booking with Seat Reservation versions = 5.4.3...

4.3CVSS7AI score0.00183EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2025/01/02 12:00 p.m.94 views

CVE-2023-47647

CVE-2023-47647 corresponds to a Missing Authorization (Broken Access Control) vulnerability in LearningTimes BadgeOS, affecting BadgeOS up to version 3.7.1.6. The issue originates from misconfigured access control levels, enabling unauthorized actions. Reported CVSS 3.1 base score 4.3 (Medium). C...

4.3CVSS8AI score0.00445EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/02 12:00 p.m.82 views

CVE-2023-47515

CVE-2023-47515 concerns the WordPress plugin “Seers – GDPR & CCPA Cookie Consent & Compliance”. Connected sources confirm a Missing Authorization/Broken Access Control issue affecting Seers versions up to 8.1.1, allowing unauthenticated access to configured security levels. The root cause is insu...

5.3CVSS8AI score0.00353EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/02 11:59 a.m.83 views

CVE-2023-45636

CVE-2023-45636 concerns the WordPress plugin WordPress Backup & Migration (wp-migration-duplicator)

5.4CVSS7.3AI score0.0038EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.12 views

PT-2026-26112

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where data reservation was incorrectly freed during fallback from inline extent creation due to an -ENOSPC error. This occurred when failing to create ...

7.5CVSS5.2AI score0.0022EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.11 views

PT-2026-26111

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to a reservation leak within the btrfs file system when inserting inline extents. Specifically, if allocation of a path or joining a transaction...

5.5CVSS5.3AI score0.0022EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/12/30 12:00 a.m.15 views

Cisco IOS Software Resource Reservation Protocol DoS (cisco-sa-rsvp-dos-OypvgVZf)

According to its self-reported version, Cisco IOS is affected by a vulnerability. - A vulnerability in the Resource Reservation Protocol RSVP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly,...

8.6CVSS5.6AI score0.0063EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/12/30 12:00 a.m.7 views

Cisco IOS XE Software Resource Reservation Protocol DoS (cisco-sa-rsvp-dos-OypvgVZf)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Resource Reservation Protocol RSVP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload...

8.6CVSS5.9AI score0.0063EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2024/12/29 3:47 a.m.10 views

SUSE CVE-2024-56706

In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Fix and protect memory allocation of SDBs with mutex Reservation of the PMU hardware is done at first event creation and is protected by a pair of mutexlock and mutexunlock. After reservation of the PMU hardware the...

6.3CVSS6.4AI score0.00166EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/24 6:48 p.m.342 views

CVE-2022-21505

CVE-2022-21505: In the Linux kernel IMA, enabling appraisal with ima_appraise=log can bypass lockdown on systems where Secure Boot is disabled or unavailable. IMA blocks ima_appraise=log via boot params when Secure Boot is enabled, but this protection does not cover lockdown used without Secure B...

6.7CVSS7AI score0.002EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/12/19 12:44 a.m.102 views

CVE-2022-33954

IBM Robotic Process Automation (RPA) versions 21.0.1–21.0.3 are affected by CVE-2022-33954 due to insufficient protection of credentials, allowing a user with physical access to obtain sensitive information. The vulnerability stems from weak credential protection mechanisms and can lead to inform...

4.6CVSS4.4AI score0.00237EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/12/18 11:28 p.m.142 views

CVE-2022-44512

Adobe Acrobat Reader DC is affected by out-of-bounds write (CWE-787) in parsing that could lead to arbitrary code execution in the current user context. Affected versions include 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. Exploitation requires user interacti...

7.8CVSS7.8AI score0.00284EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder