Lucene search
+L

5359 matches found

CNNVD
CNNVD
•added 2026/04/27 12:00 a.m.•17 views

SourceCodester Pharmacy Sales and Inventory System 注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System has a SQL injection vulnerability, which stems from the handling of parameter ID...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/27 12:00 a.m.•24 views

SourceCodester Pharmacy Sales and Inventory System 注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System has a SQL injection vulnerability, which stems from the handling of parameter ID...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•22 views

PT-2026-35420

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /ajax.php?action=save category. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released ...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/04/27 12:00 a.m.•21 views

SourceCodester Pharmacy Sales and Inventory System 注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System has a SQL injection vulnerability, which arises from improper handling of the...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•22 views

PT-2026-35541

Name of the Vulnerable Software and Affected Versions SourceCodester Pharmacy Sales and Inventory System version 1.0 Description A SQL injection flaw exists in the '/ajax.php?action=save product' endpoint. This issue allows a remote attacker to manipulate the ID argument to execute arbitrary SQL...

7.5CVSS7.4AI score0.00411EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•24 views

PT-2026-35353

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=save sales. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•33 views

PT-2026-35518

Name of the Vulnerable Software and Affected Versions Pimcore version 12.3.3 Description An authenticated administrative user with permissions to import or save DataObject class definitions can inject malicious composite index metadata. This action allows the execution of unintended SQL commands ...

7CVSS6AI score0.00602EPSS
SaveExploits0References13
CNNVD
CNNVD
•added 2026/04/27 12:00 a.m.•21 views

SourceCodester Pharmacy Sales and Inventory System 注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper...

7.5CVSS7.1AI score0.00411EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/26 10:17 p.m.•16 views

CVE-2018-25283

iSmartViewPro 1.5 contains a structured exception handling SEH buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to...

8.6CVSS0.00147EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/26 1:19 p.m.•8 views

CVE-2018-25284

HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the folder/file name field. Attackers can trigger a denial of service by entering a 6000-byte payload through the File Options Save dialog's...

6.9CVSS5.7AI score0.00182EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/26 1:19 p.m.•10 views

CVE-2018-25284 HD Tune Pro 5.70 Denial of Service via Options Dialog

HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the folder/file name field. Attackers can trigger a denial of service by entering a 6000-byte payload through the File Options Save dialog's...

6.9CVSS5.7AI score0.00182EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/04/26 1:19 p.m.•14 views

EUVD-2018-21804

HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the folder/file name field. Attackers can trigger a denial of service by entering a 6000-byte payload through the File Options Save dialog's...

6.9CVSS5.7AI score0.00182EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/26 1:19 p.m.•21 views

CVE-2018-25284

HD Tune Pro 5.70 is affected by a local denial-of-service vulnerability due to a buffer overflow in the File > Options > Save dialog, specifically in the folder/file name input field. A 6000-byte payload can crash the application when supplied as the name, indicating an exploitable overflow...

6.9CVSS5.7AI score0.00182EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/26 1:19 p.m.•48 views

CVE-2018-25284 HD Tune Pro 5.70 Denial of Service via Options Dialog

HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the folder/file name field. Attackers can trigger a denial of service by entering a 6000-byte payload through the File Options Save dialog's...

6.9CVSS0.00182EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/26 1:19 p.m.•23 views

CVE-2018-25283

CVE-2018-25283 affects iSmartViewPro 1.5. The vulnerability is a SEH-based buffer overflow in the 'Save Path for Snapshot and Record file' field. A crafted payload exceeding 260 bytes via the System Setup interface can overwrite SEH records and execute shellcode with application privileges, enabl...

8.6CVSS6.1AI score0.00147EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/26 1:19 p.m.•14 views

EUVD-2018-21803

iSmartViewPro 1.5 contains a structured exception handling SEH buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to...

8.6CVSS6.1AI score0.00147EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/26 1:19 p.m.•49 views

CVE-2018-25283 iSmartViewPro 1.5 Buffer Overflow via SavePath Parameter

iSmartViewPro 1.5 contains a structured exception handling SEH buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to...

8.6CVSS0.00147EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/04/26 1:19 p.m.•13 views

CVE-2018-25283 iSmartViewPro 1.5 Buffer Overflow via SavePath Parameter

iSmartViewPro 1.5 contains a structured exception handling SEH buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to...

8.6CVSS6AI score0.00147EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/26 12:00 a.m.•1 views

CVE-2018-25283: Buffer Copy without Checking Size of Input

iSmartViewPro 1.5 contains a structured exception handling SEH buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to...

8.6CVSS6.8AI score0.00147EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/26 12:00 a.m.•24 views

Smarteye iSmartViewPro 安全漏洞

Smarteye iSmartViewPro is a remote monitoring application for webcams developed by Smarteye Company in China. Version 1.5 of Smarteye iSmartViewPro contains a security vulnerability. This vulnerability stems from an improper handling of structured data in the “Save Path for Snapshot and Record”...

8.6CVSS6AI score0.00147EPSS
SaveExploits0References1
Rows per page
Query Builder