Lucene search
+L

222774 matches found

CNNVD
CNNVD
added 2026/04/27 12:00 a.m.17 views

NASA Earth Observing System Data and Information System 安全漏洞

NASA Earth Observing System Data and Information System is an open-source platform for managing and distributing earth science data by NASA. Version 8.1 of the NASA Earth Observing System Data and Information System contains a security vulnerability, which stems from the operation of the category...

9.4CVSS5.8AI score0.00331EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/04/27 12:00 a.m.11 views

PT-2026-35505

SQL Injection vulnerability exists in Sourcecodester Online Job Portal phppdo 1.0 ivia the category parameter in /jobportal/index.php...

5.8AI score0.00215EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/04/27 12:00 a.m.15 views

itsourcecode Courier Management System 注入漏洞

itsourcecode Courier Management System is an open-source courier management system developed by itsourcecode. Version 1.0 of the itsourcecode Courier Management System has a vulnerability related to parameter handling in the file/editparcel.php, which may lead to SQL injection attacks...

7.5CVSS7.2AI score0.00254EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/27 12:00 a.m.14 views

PT-2026-35513

A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS6.5AI score0.00241EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2026/04/27 12:00 a.m.5 views

CVE-2021-36438

SQL Injection vulnerability exists in Sourcecodester Online Job Portal phppdo 1.0 ivia the category parameter in /jobportal/index.php...

5.7AI score0.00215EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/27 12:00 a.m.15 views

PT-2026-35407

A weakness has been identified in code-projects Employee Management System 1.0. Impacted is an unknown function of the file 370project/approve.php. Executing a manipulation of the argument id/token can lead to sql injection. The attack can be executed remotely. The exploit has been made available...

6.5CVSS6.5AI score0.00192EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/27 12:00 a.m.19 views

SourceCodester Pharmacy Sales and Inventory System 注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System has a SQL injection vulnerability, which stems from the handling of the paramete...

7.5CVSS7.2AI score0.00254EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/27 12:00 a.m.17 views

Code-Projects Employee Management System 注入漏洞

Code-Projects Employee Management System is an open-source employee management system developed by Code-Projects. Version 1.0 of the Code-Projects Employee Management System has a SQL injection vulnerability. This vulnerability arises from the operation of an unknown function in the...

6.5CVSS6.7AI score0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/27 12:00 a.m.19 views

SourceCodester Pharmacy Sales and Inventory System 注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper...

7.5CVSS7.1AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/27 12:00 a.m.26 views

PT-2026-35396

A vulnerability was determined in code-projects Employee Management System 1.0. This affects an unknown part of the file 370project/edit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilize...

6.5CVSS6.5AI score0.00192EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/27 12:00 a.m.12 views

CVE-2021-36438

SQL Injection vulnerability exists in Sourcecodester Online Job Portal phppdo 1.0 ivia the category parameter in /jobportal/index.php...

5.7AI score0.00215EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/27 12:00 a.m.16 views

PT-2026-35391

Name of the Vulnerable Software and Affected Versions Directorist Booking versions prior to 3.0.2 Description Improper Neutralization of Special Elements used in an SQL Command SQL Injection allows an attacker to interfere with the queries that an application makes to its database. This can lead ...

9.3CVSS5.5AI score0.00283EPSS
SaveExploits0References6
Spring Security Advisories
Spring Security Advisories
added 2026/04/27 12:00 a.m.19 views

SQL Injection in CosmosDBVectorStore.doDelete()

SQL injection vulnerability in Spring AI's CosmosDBVectorStore allows attackers to execute arbitrary SQL queries via crafted document IDs. Only applications that use CosmosDBVectorStore and pass user-supplied input as document ids are affected...

8.8CVSS6.2AI score0.00338EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/27 12:00 a.m.10 views

PT-2026-35421

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=delete receiving. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit ha...

7.5CVSS7.3AI score0.00254EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/04/26 10:30 p.m.48 views

CVE-2026-7063 code-projects Employee Management System Endpoint eprocess.php sql injection

A vulnerability was detected in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file /370project/process/eprocess.php of the component Endpoint. Performing a manipulation of the argument pwd results in sql injection. The attack is possible to be carrie...

7.5CVSS0.00254EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/26 10:30 p.m.45 views

CVE-2026-7063

The CVE-2026-7063 entry concerns code-projects Employee Management System 1.0, specifically the Endpoint component’s file /370project/process/eprocess.php. The vulnerability arises from manipulating the pwd argument, leading to SQL injection. Exploitation is described as remote and the exploit is...

7.5CVSS7.3AI score0.00254EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/26 10:30 p.m.9 views

CVE-2026-7063 code-projects Employee Management System Endpoint eprocess.php sql injection

A vulnerability was detected in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file /370project/process/eprocess.php of the component Endpoint. Performing a manipulation of the argument pwd results in sql injection. The attack is possible to be carrie...

7.5CVSS7.3AI score0.00254EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/26 10:17 p.m.24 views

CVE-2026-7060

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/java/com/yupi/yupicturebackend/service/impl/PictureServiceImpl.java of the component MyBatis-Plus. Executing a...

7.5CVSS0.00263EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/04/26 8:15 p.m.7 views

CVE-2026-7060 liyupi yu-picture MyBatis-Plus PictureServiceImpl.java PageRequest sql injection

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/java/com/yupi/yupicturebackend/service/impl/PictureServiceImpl.java of the component MyBatis-Plus. Executing a...

7.5CVSS7.1AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/04/26 8:15 p.m.44 views

CVE-2026-7060

Technical details (affected versions, exact file paths, patch info) are not publicly available in the provided documents. Monitor for updates.

7.5CVSS7.1AI score0.00263EPSS
SaveExploits0References6
Rows per page
Query Builder