Lucene search
+L

1470 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:44 p.m.9 views

Malicious code in 3months-staff-schedule (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSV
OSV
added 2024/06/25 1:01 p.m.6 views

MAL-2024-3052 Malicious code in staff-lite (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:01 p.m.3 views

Malicious code in staff-lite (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0References1
OSV
OSV
added 2024/06/25 12:23 p.m.7 views

MAL-2024-3051 Malicious code in staff-account (npm)

False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Hacker One
Hacker One
added 2024/06/22 4:36 a.m.54 views

HackerOne: Reports submitted by a non 2fa setupped user account can be transferred to a 2fa require submission program

Vulnerability description not provided...

7.1AI score
SaveExploits0
HackRead
HackRead
added 2024/06/21 11:45 p.m.14 views

LAUSD Data Breach: Hackers Leak 25M Records, Including Student Locations

The Los Angeles Unified School District LAUSD suffered a massive data breach due to a Snowflake vulnerability, exposing personal details of millions of students and thousands of teachers and staff...

7.2AI score
SaveExploits0
OSV
OSV
added 2024/06/18 5:15 p.m.14 views

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...

8.8CVSS5.8AI score0.00432EPSS
SaveExploits1References2
NVD
NVD
added 2024/06/18 5:15 p.m.42 views

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...

8.8CVSS0.00432EPSS
SaveExploits1References2
OSV
OSV
added 2024/06/18 5:15 p.m.12 views

CVE-2024-37803

Multiple stored cross-site scripting XSS vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page...

5.4CVSS5.9AI score0.00326EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/06/18 12:00 a.m.16 views

PT-2024-27951 · Unknown · Codeprojects Health Care Hospital Management System

Name of the Vulnerable Software and Affected Versions: CodeProjects Health Care hospital Management System version 1.0 Description: The issue is related to a SQL injection vulnerability in the Staff Info module. This vulnerability can be exploited via the searvalu parameter. Recommendations: For...

8.8CVSS8.1AI score0.00432EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2024/06/18 12:00 a.m.23 views

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...

8.4AI score0.00432EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/06/18 12:00 a.m.44 views

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...

0.00432EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/06/18 12:00 a.m.11 views

Health Care hospital Management System SQL Injection Vulnerability

Health Care hospital Management System is an open source health care hospital management system from Code-Projects. A SQL injection vulnerability exists in Health Care hospital Management System v1.0, which originates from a SQL injection vulnerability in the searvalu parameter in the Staff Info...

8.8CVSS8AI score0.00432EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/06/18 12:00 a.m.36 views

CVE-2024-37803

Multiple stored cross-site scripting XSS vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page...

0.00326EPSS
SaveExploits1References2
CVE
CVE
added 2024/06/18 12:00 a.m.81 views

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 contains a SQL injection vulnerability in the Staff Info module reachable via the searvalu parameter. The issue is documented across multiple sources (NVD, CVE list, CNNVD, PT-Security, etc.) with the vulnerability impacting the Staff Info ...

8.8CVSS8.3AI score0.00432EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2024/06/14 4:36 a.m.67 views

CVE-2024-1094

The CVE-2024-1094 entry concerns the Timetics WP Timetics- AI-powered Appointment Booking with Visual Seat Plan and Calendar Scheduling plugin for WordPress. Affected versions are all up to and including 1.0.21, with a missing capability check in make_staff() that allows unauthenticated users to ...

7.3CVSS5.9AI score0.00542EPSS
SaveExploits0References2
NVD
NVD
added 2024/06/12 9:15 a.m.39 views

CVE-2023-51526

Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4...

4.3CVSS0.00324EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/12 9:03 a.m.16 views

CVE-2023-51526 WordPress Simple Staff List plugin <= 2.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4...

4.3CVSS6.9AI score0.00324EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/12 9:03 a.m.29 views

CVE-2023-51526 WordPress Simple Staff List plugin <= 2.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4...

4.3CVSS0.00324EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/12 12:00 a.m.9 views

WordPress plugin Simple Staff List security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.3CVSS6.8AI score0.00324EPSS
SaveExploits0References2
Rows per page
Query Builder