Lucene search
K

42 matches found

OSV
OSV
added 2026/04/24 3:16 p.m.1 views

DEBIAN-CVE-2026-31615

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: renesasusb3: validate endpoint index in standard request handlers The GETSTATUS and SET/CLEARFEATURE handlers extract the endpoint number from the host-supplied wIndex without any sort of validation. Fix this up by...

5.5CVSS5.3AI score0.00019EPSS
Exploits0References1
OSV
OSV
added 2026/02/06 2:16 p.m.2 views

CVE-2026-2056

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

7.5CVSS5.3AI score0.00085EPSS
Exploits1References6
EUVD
EUVD
added 2026/02/06 2:2 p.m.4 views

EUVD-2026-5661

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

6.9CVSS5.2AI score0.00085EPSS
Exploits1References6
CVE
CVE
added 2026/02/06 2:2 p.m.11 views

CVE-2026-2056

D-Link DIR-605L and DIR-619L routers are affected (versions 2.06B01 and 2.13B01). The issue resides in an unknown function of the file /wan_connection_status.asp within the DHCP Connection Status Handler. The manipulation leads to information disclosure and remote exploitation is possible; the ex...

7.5CVSS4.9AI score0.00085EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2026/02/06 2:2 p.m.23 views

CVE-2026-2056 D-Link DIR-605L/DIR-619L DHCP Connection Status wan_connection_status.asp information disclosure

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

6.9CVSS0.00085EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/02/06 12:0 a.m.5 views

PT-2026-6725

Name of the Vulnerable Software and Affected Versions D-Link DIR-605L version 2.06B01 D-Link DIR-619L version 2.06B01 D-Link DIR-605L version 2.13B01 D-Link DIR-619L version 2.13B01 Description A security issue has been identified in D-Link DIR-605L and DIR-619L routers. The issue resides in an...

6.9CVSS5.3AI score0.00085EPSS
Exploits1References8
OSV
OSV
added 2025/12/28 10:15 a.m.0 views

CVE-2025-15131

A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...

8.8CVSS5.5AI score0.00166EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/10/28 6:52 p.m.3 views

CVE-2025-12304

A vulnerability has been found in dulaiduwang003 TIME-SEA-PLUS up to fb299162f18498dd9cf17da906886d80a077d53b. This affects the function alipayIsSucceed of the file PayController.java of the component Order Status Handler. The manipulation leads to improper authorization. Remote exploitation of t...

5.3CVSS6.3AI score0.0003EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/27 6:32 p.m.2 views

EUVD-2025-36334

A vulnerability has been found in dulaiduwang003 TIME-SEA-PLUS up to fb299162f18498dd9cf17da906886d80a077d53b. This affects the function alipayIsSucceed of the file PayController.java of the component Order Status Handler. The manipulation leads to improper authorization. Remote exploitation of t...

5.3CVSS6.1AI score0.0003EPSS
Exploits0References5
CVE
CVE
added 2025/10/27 6:32 p.m.3 views

CVE-2025-12304

TIME-SEA-PLUS (dulaiduwang003) up to fb299162f18498dd9cf17da906886d80a077d53b is affected. The vulnerability resides in the function alipayIsSucceed of PayController.java within the Order Status Handler, caused by improper authorization. Remote exploitation is possible, and the exploit has been d...

5.3CVSS6.3AI score0.0003EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-32238

Malicious code in bioql PyPI...

6.1CVSS5.8AI score0.00054EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-29147

Malicious code in bioql PyPI...

5.3CVSS4.9AI score0.00069EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-32228

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00033EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/15 2:32 a.m.7 views

CVE-2025-10422 newbee-mall Order Status paySuccess improper authorization

A vulnerability has been found in newbee-mall up to 613a662adf1da7623ec34459bc83e3c1b12d8ce7. This issue affects the function paySuccess of the file /paySuccess of the component Order Status Handler. The manipulation of the argument orderNo leads to improper authorization. Remote exploitation of...

5.3CVSS0.00069EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/09/15 2:32 a.m.2 views

CVE-2025-10422 newbee-mall Order Status paySuccess improper authorization

A vulnerability has been found in newbee-mall up to 613a662adf1da7623ec34459bc83e3c1b12d8ce7. This issue affects the function paySuccess of the file /paySuccess of the component Order Status Handler. The manipulation of the argument orderNo leads to improper authorization. Remote exploitation of...

5.3CVSS6.3AI score0.00069EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/09/15 12:0 a.m.4 views

PT-2025-37443

Name of the Vulnerable Software and Affected Versions: newbee-mall versions prior to 613a662adf1da7623ec34459bc83e3c1b12d8ce7 Description: A vulnerability exists in newbee-mall related to improper authorization. The issue affects the paySuccess function within the /paySuccess file of the Order...

5.3CVSS4.5AI score0.00069EPSS
Exploits1References10
CNNVD
CNNVD
added 2025/09/15 12:0 a.m.2 views

newbee-mall 授权问题漏洞

newbee-mall is a newbee open source e-commerce system . There is an authorization issue vulnerability in newbee-mall, which stems from improper handling of the parameter orderNo of the component Order Status Handler in file/paySuccess, which may lead to improper authorization...

5.3CVSS4.9AI score0.00069EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 5:39 a.m.2 views

CVE-2023-0980

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/registrations/updatestatus.php of the component Status Update Handler. The manipulation of the argument id leads to sql injection...

9.8CVSS8.5AI score0.00179EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:33 a.m.5 views

CVE-2023-6076

A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file booking-details.php of the component Reservation Status Handler. The manipulation of the argument bid leads to information...

7.5CVSS6.6AI score0.00088EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 3:37 a.m.4 views

CVE-2023-28558

Memory corruption in WLAN handler while processing PhyID in Tx status handler...

7.8CVSS7.2AI score0.00033EPSS
Exploits0References1
Rows per page
Query Builder