Lucene search
+L

1193 matches found

OSV
OSV
added 2023/04/14 1:15 p.m.14 views

CVE-2023-2053

A vulnerability, which was classified as critical, has been found in Campcodes Advanced Online Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/candidatesrow.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

7.5CVSS6.5AI score0.00747EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/14 12:15 p.m.10 views

CVE-2023-2051

A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of the file /admin/positionsrow.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS6.5AI score0.00747EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/14 11:15 a.m.14 views

CVE-2023-2048

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/votersrow.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS5.7AI score0.0074EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.13 views

Campcodes Advanced Online Voting System SQL注入漏洞

Campcodes Advanced Online Voting System is an online voting system. Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the file /admin/votersrow.php, which can be...

8.8CVSS7.9AI score0.0074EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/14 12:00 a.m.15 views

PT-2023-17452 · Unknown · Campcodes Advanced Online Voting System

Name of the Vulnerable Software and Affected Versions: Campcodes Advanced Online Voting System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /admin/candidates row.php. The manipulation of the id argument leads to sql...

7.5CVSS7AI score0.00747EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.11 views

Campcodes Advanced Online Voting System SQL注入漏洞

Campcodes Advanced Online Voting System is an online voting system. A SQL injection vulnerability exists in Campcodes Advanced Online Voting System v1.0. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the file /admin/candidatesrow.php,...

8.8CVSS8.2AI score0.00747EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.12 views

Online Voting System SQL注入漏洞

Campcodes Advanced Online Voting System is an online voting system. A SQL injection vulnerability exists in Campcodes Advanced Online Voting System v1.0. The vulnerability stems from the lack of validation of externally entered SQL statements in the parameter id of the file /admin/positionsrow.ph...

8.8CVSS8.2AI score0.00747EPSS
SaveExploits1References4
OSV
OSV
added 2023/04/05 8:15 a.m.13 views

CVE-2023-1849

A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cashadvancerow.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotel...

9.8CVSS5.7AI score0.00808EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/05 7:15 a.m.13 views

CVE-2023-1845

A vulnerability, which was classified as critical, was found in SourceCodester Online Payroll System 1.0. This affects an unknown part of the file /admin/employeerow.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

9.8CVSS5.7AI score0.00808EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/04/05 12:00 a.m.17 views

PT-2023-17277 · Sourcecodester · Sourcecodester Online Payroll System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Payroll System version 1.0 Description: A critical issue was found in the SourceCodester Online Payroll System, affecting an unknown part of the file /admin/employee row.php. The manipulation of the id argument leads to...

9.8CVSS7.2AI score0.00808EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2023/04/05 12:00 a.m.23 views

PT-2023-17280 · Unknown · Sourcecodester Online Payroll System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Payroll System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /admin/attendance row.php. The manipulation of the id argument leads to sql injection,...

9.8CVSS6.7AI score0.00808EPSS
SaveExploits1References7
NVD
NVD
added 2023/03/07 1:15 a.m.31 views

CVE-2023-22847

Information disclosure vulnerability exists in pgivm versions prior to 1.5.1. An Incrementally Maintainable Materialized View IMMV created by pgivm may reflect rows with Row-Level Security that the owner of the IMMV should not have access to. As a result, information in tables protected by...

4.3CVSS4.4AI score0.00618EPSS
SaveExploits0References3
Prion
Prion
added 2023/03/07 1:15 a.m.27 views

Information disclosure

Information disclosure vulnerability exists in pgivm versions prior to 1.5.1. An Incrementally Maintainable Materialized View IMMV created by pgivm may reflect rows with Row-Level Security that the owner of the IMMV should not have access to. As a result, information in tables protected by...

4CVSS5.2AI score0.00618EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/07 12:00 a.m.11 views

CVE-2023-22847

Information disclosure vulnerability exists in pgivm versions prior to 1.5.1. An Incrementally Maintainable Materialized View IMMV created by pgivm may reflect rows with Row-Level Security that the owner of the IMMV should not have access to. As a result, information in tables protected by...

6.6AI score0.00618EPSS
SaveExploits0References3
CVE
CVE
added 2023/03/07 12:00 a.m.70 views

CVE-2023-22847

CVE-2023-22847 affects the pg_ivm extension (versions before 1.5.1). An Incrementally Maintainable Materialized View (IMMV) may reflect rows protected by Row-Level Security, allowing unauthorized users to access restricted data. The issue is confirmed across multiple sources; fix is to update to ...

4.3CVSS4.3AI score0.00618EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/03/07 12:00 a.m.26 views

CVE-2023-22847

Information disclosure vulnerability exists in pgivm versions prior to 1.5.1. An Incrementally Maintainable Materialized View IMMV created by pgivm may reflect rows with Row-Level Security that the owner of the IMMV should not have access to. As a result, information in tables protected by...

4.3CVSS6.6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/03/07 12:00 a.m.17 views

PT-2023-18723 · Pg Ivm · Pg Ivm

Name of the Vulnerable Software and Affected Versions: pg ivm versions prior to 1.5.1 Description: An information disclosure issue exists where an Incrementally Maintainable Materialized View IMMV created by pg ivm may reflect rows with Row-Level Security that the owner of the IMMV should not hav...

4.3CVSS4.3AI score0.00618EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/03/06 6:22 a.m.11 views

Multiple vulnerabilities in PostgreSQL extension module pg_ivm

Overview pgivm provided by IVM Development Group is a PostgreSQL extension module that provides incremental view maintenance functionality of materialized views. pgivm contains multiple vulnerabilities listed below. Exposure of sensitive information to an unauthorized actor CWE-200 - CVE-2023-228...

8.8CVSS7AI score0.00939EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/03/06 12:00 a.m.9 views

PT-2023-10272 · WordPress · Mark User As Spammer Plugin

Name of the Vulnerable Software and Affected Versions: Mark User as Spammer Plugin versions 1.0.0 through 1.0.1 Description: A vulnerability was found in the Mark User as Spammer Plugin. It affects the user row actions function of the file plugin/plugin.php. The manipulation of the url argument...

5.4CVSS4.1AI score0.00552EPSS
SaveExploits0References7
F5 Networks
F5 Networks
added 2023/02/21 7:41 p.m.24 views

K16842: Row hammer (rowhammer) vulnerability

Security Advisory Description Row hammer rowhammer is a problem with some recent DRAM devices, in which repeatedly accessing a row of memory can cause bit flips in adjacent rows. Impact None. F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has...

6.7AI score
SaveExploits0
Rows per page
Query Builder