Lucene search
+L

1619 matches found

osv_cve
osv_cve
•added 2024/11/08 12:00 a.m.•11 views

CVE-2024-27532

wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...

7.5CVSS7AI score
SaveExploits0References4
CVE
CVE
•added 2024/11/05 5:10 p.m.•189 views

CVE-2024-50102

CVE-2024-50102 : The connected advisories indicate a Linux kernel x86 issue where using the high address bit to classify user vs. kernel space enabled a speculative-execution leak for non-canonical addresses. The root cause involves non-canonical address handling and an evolving AC/bit behavior a...

5.5CVSS5.9AI score0.00239EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2024/11/01 1:15 a.m.•18 views

CVE-2024-10607

A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /track-result.php. The manipulation of the argument Consignment leads to sql injection. The attack can be initiated remotely. The exploit...

9.8CVSS5.8AI score0.00698EPSS
SaveExploits1References5
CNVD
CNVD
•added 2024/11/01 12:00 a.m.•18 views

Courier Management System track-result.php file SQL Injection Vulnerability

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that stems from improper handling of the Consignment parameter in the file /track-result.php. An attacker could exploit this vulnerability to cause data disclosure or...

9.8CVSS7.7AI score0.00698EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/11/01 12:00 a.m.•17 views

Code-Projects Courier Management System Security Vulnerabilities

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that stems from improper handling of the Consignment parameter in the file /track-result.php. An attacker could exploit this vulnerability to cause data disclosure or...

9.8CVSS7.7AI score0.00698EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2024/10/15 1:15 p.m.•21 views

CVE-2024-48283

Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter...

9.8CVSS5.8AI score0.00601EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/10/15 1:15 p.m.•18 views

CVE-2024-48279

A HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary HTML code via the searchkey parameter in a POST HTTP request...

7.6CVSS6.1AI score0.00576EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/10/15 1:15 p.m.•22 views

CVE-2024-48280

A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2, which allows remote attackers to execute arbitrary SQL command via the fromdate parameter in a POST HTTP request...

7.6CVSS6.1AI score0.00463EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•29 views

PT-2024-33067 · Unknown · Phpgurukul User Registration & Login/User Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management System version 3.2 Description: A SQL Injection issue was found in the /search-result.php file, allowing remote attackers to execute arbitrary SQL commands via the fromdate parameter in...

7.6CVSS9.3AI score0.00463EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•26 views

PT-2024-33069 · Unknown · Phpgurukul User Registration & Login/User Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul User Registration & Login and User Management System version 3.2 Description: The issue is related to SQL Injection in the /admin//search-result.php endpoint via the searchkey parameter. This allows for potential exploitation. No...

9.8CVSS7.8AI score0.00601EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/10/15 12:00 a.m.•40 views

CVE-2024-48283

Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter...

0.00601EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2024/10/10 6:30 a.m.•4 views

Malware in case-result-reporter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/09/25 12:31 p.m.•9 views

Malicious code in case-result-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53752de38b0f242f1a98e32994dffdc4793390a73bf2685bb38db58aff3156fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/09/25 12:31 p.m.•14 views

MAL-2024-8986 Malicious code in case-result-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53752de38b0f242f1a98e32994dffdc4793390a73bf2685bb38db58aff3156fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/09/11 11:05 p.m.•11 views

Malicious code in publish-test-result-screenshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf2cd13f851593ee5dc61c5c17c22a1efa0d43ec11f32023e7dfecfdd1c76adb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/09/11 11:05 p.m.•4 views

Malware in publish-test-result-screenshot

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
•added 2024/09/11 2:54 a.m.•15 views

SUSE CVE-2024-43357

ECMA-262 is the language specification for the scripting language ECMAScript. A problem in the ECMAScript JavaScript specification of async generators, introduced by a May 2021 spec refactor, may lead to mis-implementation in a way that could present as a security vulnerability, such as type...

8.6CVSS8.8AI score0.00679EPSS
SaveExploits0References3
Packet Storm
Packet Storm
•added 2024/09/04 12:00 a.m.•240 views

Student Result Management System 2.0 Insecure Direct Object Reference

============================================================================================================================================= | Title : Student Result Management System v2.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

7.4AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2024/08/21 1:15 a.m.•29 views

CVE-2024-43877

In the Linux kernel, the following vulnerability has been resolved: media: pci: ivtv: Add check for DMA map result In case DMA fails, 'dma-SGlength' is 0. This value is later used to access 'dma-SGarraydma-SGlength - 1', which will cause out of bounds access. Add check to return early on invalid...

7.8CVSS6.4AI score0.00219EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2024/08/18 2:01 a.m.•22 views

SUSE CVE-2024-43841

In the Linux kernel, the following vulnerability has been resolved: wifi: virtwifi: avoid reporting connection success with wrong SSID When user issues a connection with a different SSID than the one virtwifi has advertised, the cfg80211connectresult will trigger the warning: WARNONbssnotfound. T...

5.5CVSS6.5AI score0.00211EPSS
SaveExploits0References13
Rows per page
Query Builder