Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/01/21 12:30 p.m.10 views

CVE-2025-41024

Stored Cross-Site Scripting XSS in Poultry Farm Management System v1.0 due to the lack of proper validation of user input by sending a POST request. The relationship between parameters and assigned identifiers is as follows: 'companyaddress', 'companyemail', 'companyname', 'country', 'mobilenumbe...

5.4CVSS5.5AI score0.00162EPSS
Exploits0References1
NVD
NVD
added 2025/08/11 8:15 a.m.3 views

CVE-2025-8661

A stored Cross-Site Scripting vulnerability XSS occurs when the server does not properly validate or encode the data entered by the user...

6.1CVSS0.00175EPSS
Exploits0References1
CVE
CVE
added 2025/08/11 7:52 a.m.21 views

CVE-2025-8661

CVE-2025-8661 is described as a stored Cross-Site Scripting (XSS) vulnerability in Symantec PGP Encryption 11.0.1, arising from improper validation/encoding of user-supplied data. Per the initial entry, the CVSS 3.1 base score is 6.1 (Medium) with Network attack vector, user interaction required,...

6.1CVSS6AI score0.00175EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/09 12:0 a.m.6 views

The vulnerability of the ping tool in the web interface of the microprogramming software for routing and switching platform RUGGEDCOM ROX series, MX (MX5000, MX5000RE) and RX (RX1400, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, and RX5000), allows a hacker to execute arbitrary code.

The vulnerability of the ping tool in the web interface of the microprogramming software for routing and switching platform RUGGEDCOM ROX models series MX MX5000, MX5000RE and RX RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, and RX5000 is related to the absence of a mechanism to...

9.9CVSS5.9AI score0.01168EPSS
Exploits0References3Affected Software11
OSV
OSV
added 2025/03/12 2:15 p.m.1 views

CVE-2024-52362

IBM App Connect Enterprise Certified Container 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, and 12.8 could allow an authenticated user to cause a denial of service in the App Connect flow due to improper...

6.5CVSS5.8AI score0.00434EPSS
Exploits0References1
OSV
OSV
added 2024/08/02 11:16 a.m.2 views

CVE-2024-40721

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause the TCBServiSign to load a DLL from an arbitrary path...

8.8CVSS5.9AI score0.00532EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/08/02 12:0 a.m.5 views

PT-2024-28999 · Changing Information Technology · Tcbservisign Windows Version

Name of the Vulnerable Software and Affected Versions: TCBServiSign Windows Version from CHANGING Information Technology affected versions not specified Description: The issue concerns improper validation of server-side input in a specific API. This can be exploited by unauthenticated remote...

8.8CVSS7.7AI score0.0056EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/11/08 12:0 a.m.5 views

ZTE ZAIP-AIE SQL注入漏洞

ZTE ZAIP-AIE is a product of China's ZTE Corporation ZTE. The ZTE ZAIP-AIE suffers from a security vulnerability that stems from a lack of input validation on the server and a SQL injection vulnerability that allows an attacker to trigger an attack by constructing a malicious request, which in tu...

5.3CVSS6AI score0.00443EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2019/10/17 4:15 p.m.28 views

CVE-2019-11253

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming...

7.5CVSS6.8AI score0.25939EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2018/07/13 12:0 a.m.8 views

PT-2021-2904 · Oracle +10 · Mysql Server +9

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.33 and prior MySQL Server versions 8.0.23 and prior Description: The issue is related to insufficient input validation in the InnoDB component of the MySQL Server. It allows a remote attacker to cause a denial of...

9.8CVSS7.1AI score0.88077EPSS
Exploits33References954
BDU FSTEC
BDU FSTEC
added 2017/02/09 12:0 a.m.2 views

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server component exists due to insufficient validation of input data by the MySQL database management system. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the system to become unresponsive or, in rare cases, to crash using network...

4CVSS7.1AI score0.03103EPSS
Exploits0References3Affected Software1
exploitpack
exploitpack
added 2000/04/16 12:0 a.m.11 views

RedHat Linux 6.x - X Font Server Buffer Overflow (Denial of Service)

RedHat Linux 6.x - X Font Server Buffer Overflow Denial of Service // source: https://www.securityfocus.com/bid/1111/info A denial of service exists in the X11 font server shipped with RedHat Linux 6.x. Due to improper input validation, it is possible for any user to crash the X fontserver. This...

Exploits0
Rows per page
Query Builder