Lucene search
K

2291 matches found

SUSE CVE
SUSE CVE
added 2025/02/17 3:47 a.m.1 views

SUSE CVE-2025-24898

rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::selectnextproto can return a slice pointing into the server argument's buffer but with a lifetime bound to the client argument. In situations where the sever buffer's lifetime is shorter than th...

6.3CVSS7.3AI score0.00116EPSS
Exploits0References7
OSV
OSV
added 2025/02/12 9:15 p.m.1 views

CVE-2025-1227

A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mapper/xml/AddressDao.xml. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

8.8CVSS5.6AI score
Exploits0References3
Cvelist
Cvelist
added 2025/02/12 11:0 a.m.11 views

CVE-2025-1192 SourceCodester Multi Restaurant Table Reservation System select-menu.php sql injection

A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file select-menu.php. The manipulation of the argument table leads to sql injection. It is possible to launch the attack remotely...

6.5CVSS0.00147EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/02/12 11:0 a.m.8 views

CVE-2025-1192 SourceCodester Multi Restaurant Table Reservation System select-menu.php sql injection

A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file select-menu.php. The manipulation of the argument table leads to sql injection. It is possible to launch the attack remotely...

6.5CVSS6.8AI score0.00147EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.3 views

SourceCodester Multi Restaurant Table Reservation System 注入漏洞

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system from SourceCodester, Inc. An injection vulnerability exists in version 1.0 of the SourceCodester Multi Restaurant Table Reservation System, which stems from an SQL injection vulnerability...

8.8CVSS7AI score0.00147EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/02/09 10:20 a.m.4 views

CVE-2025-25079

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Garrett Grimm Simple Select All Text Box simple-select-all-text-box allows Stored XSS.This issue affects Simple Select All Text Box: from n/a through = 3.2...

6.5CVSS7.2AI score0.00112EPSS
Exploits0References1
NVD
NVD
added 2025/02/07 10:15 a.m.4 views

CVE-2025-25079

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Garrett Grimm Simple Select All Text Box simple-select-all-text-box allows Stored XSS.This issue affects Simple Select All Text Box: from n/a through = 3.2...

6.5CVSS0.00112EPSS
Exploits0References1
CVE
CVE
added 2025/02/07 10:11 a.m.52 views

CVE-2025-25079

CVE-2025-25079 describes a Stored XSS in the WordPress plugin Simple Select All Text Box (versions up to 3.2). The vulnerability arises from improper input neutralization during web page generation, enabling attacker-supplied scripts to be stored and delivered to users. The initial records and co...

6.5CVSS7.2AI score0.00112EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/07 12:0 a.m.3 views

PT-2025-6839 · Sourcecodester · Sourcecodester Multi Restaurant Table Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Multi Restaurant Table Reservation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file select-menu.php. The manipulation of the table argument leads to SQL...

8.8CVSS8.1AI score0.00147EPSS
Exploits0References12
CNNVD
CNNVD
added 2025/02/07 12:0 a.m.2 views

WordPress plugin Simple Select All Text Box 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS8.1AI score0.00112EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 11:29 a.m.6 views

CVE-2024-34552

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through 9.6...

8.8CVSS6.7AI score0.00645EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:4 a.m.6 views

CVE-2024-21989

ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when successfully exploited could allow a read-only user to escalate their privileges...

8.8CVSS7AI score0.00185EPSS
Exploits0References1
OSV
OSV
added 2025/02/03 6:15 p.m.3 views

AZL-56427 CVE-2025-24898 affecting package 389-ds-base 3.1.1-10

rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::selectnextproto can return a slice pointing into the server argument's buffer but with a lifetime bound to the client argument. In situations where the sever buffer's lifetime is shorter than th...

6.3CVSS6.1AI score0.00116EPSS
Exploits0References1
OSV
OSV
added 2025/02/03 6:15 p.m.0 views

UBUNTU-CVE-2025-24898

rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::selectnextproto can return a slice pointing into the server argument's buffer but with a lifetime bound to the client argument. In situations where the sever buffer's lifetime is shorter than th...

6.3CVSS6.1AI score0.00116EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2025/02/03 5:56 p.m.18 views

rust-openssl ssl::select_next_proto use after free

Impact ssl::selectnextproto can return a slice pointing into the server argument's buffer but with a lifetime bound to the client argument. In situations where the server buffer's lifetime is shorter than the client buffer's, this can cause a use after free. This could cause the server to crash o...

6.3CVSS6.7AI score0.00116EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2025/02/03 5:56 p.m.6 views

GHSA-RPMJ-RPGJ-QMPM rust-openssl ssl::select_next_proto use after free

Impact ssl::selectnextproto can return a slice pointing into the server argument's buffer but with a lifetime bound to the client argument. In situations where the server buffer's lifetime is shorter than the client buffer's, this can cause a use after free. This could cause the server to crash o...

6.3CVSS5.2AI score0.00116EPSS
Exploits0References8
Patchstack
Patchstack
added 2025/02/03 4:12 p.m.2 views

WordPress Simple Select All Text Box plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Simple Select All Text Box versions = 3.2...

6.5CVSS6.1AI score0.00112EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/02/03 1:15 a.m.0 views

CVE-2025-0973

A vulnerability classified as critical was found in CmsEasy 7.7.7.9. This vulnerability affects the function backAllaction in the library lib/admin/databaseadmin.php of the file /index.php?case=database&act=backAll&admindir=admin&site=default. The manipulation of the argument select leads to path...

6.5CVSS5.4AI score
Exploits0References4
CNNVD
CNNVD
added 2025/02/03 12:0 a.m.1 views

CmsEasy 路径遍历漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's CmsEasy company. A path traversal vulnerability exists in CmsEasy version 7.7.7.9, which stems from a path traversal caused by the parameter select in...

6.5CVSS5.6AI score0.00039EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/02/03 12:0 a.m.1 views

rust-openssl 资源管理错误漏洞

rust-openssl is a library from Rust for interacting with the OpenSSL library. A resource management error vulnerability exists in rust-openssl that stems from an incorrect return value lifecycle of the ssl::selectnextproto function, which could lead to the use of freed memory...

6.3CVSS5AI score0.00116EPSS
Exploits0References3
Rows per page
Query Builder