Lucene search
+L

8425 matches found

CNNVD
CNNVD
added 2024/01/29 12:00 a.m.13 views

Login System with Email Verification Security Vulnerability

Login System with Email Verification is an email verification login system by rems Personal Developer. A security vulnerability exists in Login System with Email Verification version 1.0, which is caused by an SQL injection vulnerability in the user parameter...

7.2CVSS8AI score0.01155EPSS
SaveExploits3References2
CNNVD
CNNVD
added 2024/01/29 12:00 a.m.12 views

School Task Manager Security Vulnerability

School Task Manager is a school task manager by rems personal developer. A security vulnerability exists in School Task Manager version 1.0, which is caused by a SQL injection vulnerability in the task parameter...

9.8CVSS8AI score0.01101EPSS
SaveExploits3References2
BDU FSTEC
BDU FSTEC
added 2024/01/24 12:00 a.m.13 views

The vulnerability of the Nginx UI server’s user interface allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Nginx UI server’s user interface relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

7CVSS6.8AI score0.00584EPSS
SaveExploits1References3Affected Software1
GithubExploit
GithubExploit
added 2024/01/21 9:45 p.m.57 views

Exploit for SQL Injection in Remyandrade Daily_Habit_Tracker

CVE-2024-24140: Daily Habit Tracker App SQL Inj...

7.2CVSS8.1AI score0.01159EPSS
SaveExploits3
CNNVD
CNNVD
added 2024/01/20 12:00 a.m.9 views

YonBIP 安全漏洞

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. A SQL injection vulnerability exists in YonBIP, which can be exploited by attackers to obtain sensitive information or execute arbitrary code...

9.8CVSS8.1AI score0.00555EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/01/19 12:00 a.m.11 views

ForU CMS SQL注入漏洞

ForU CMS is ForU open source a website building system . ForU CMS 2020-06-23 and earlier versions suffer from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database data...

9.8CVSS7.8AI score0.00591EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/01/18 12:00 a.m.7 views

PHPGurukul Company Visitor Management System 安全漏洞

Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file search-visitor.php. An attacker can exploit this vulnerability to...

7.2CVSS8.1AI score0.0063EPSS
SaveExploits1References4
Prion
Prion
added 2024/01/17 2:15 p.m.21 views

Buffer overflow

Buffer overflow vulnerability in Explorer++ affecting version 1.3.5.531. A local attacker could execute arbitrary code via a long filename argument by monitoring Structured Exception Handler SEH records...

4.3CVSS8AI score0.00186EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/17 1:47 p.m.15 views

CVE-2024-0645 Buffer Overflow Vulnerability in Explorer++

Buffer overflow vulnerability in Explorer++ affecting version 1.3.5.531. A local attacker could execute arbitrary code via a long filename argument by monitoring Structured Exception Handler SEH records...

7.3CVSS7.7AI score0.00186EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/17 1:47 p.m.32 views

CVE-2024-0645 Buffer Overflow Vulnerability in Explorer++

Buffer overflow vulnerability in Explorer++ affecting version 1.3.5.531. A local attacker could execute arbitrary code via a long filename argument by monitoring Structured Exception Handler SEH records...

7.3CVSS8AI score0.00186EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/17 12:00 a.m.8 views

Explorer++ Buffer Error Vulnerability

Explorer++ is a lightweight and fast Windows file manager by David Erceg, a personal developer. A buffer error vulnerability exists in Explorer++ version 1.3.5.531, which stems from an arbitrary code execution vulnerability in the component Structured Exception Handler...

7.8CVSS7.9AI score0.00186EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/01/17 12:00 a.m.14 views

PT-2024-15713 · Extplorer · Extplorer

Name of the Vulnerable Software and Affected Versions: Explorer++ version 1.3.5.531 Description: A local attacker could execute arbitrary code via a long filename argument by monitoring Structured Exception Handler SEH records. This issue allows for the execution of arbitrary code, potentially...

7.8CVSS8AI score0.00186EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:00 a.m.13 views

The vulnerability of the /admin/ file of the Admin Login component of the Engineers Online Portal allows a malicious user to execute arbitrary SQL queries.

The vulnerability of the /admin/ file of the Admin Login component of the Engineers Online Portal is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

10CVSS7.6AI score0.00602EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/01/16 4:15 p.m.10 views

CVE-2023-3211

The WordPress Database Administrator WordPress plugin through 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

9.8CVSS7.3AI score0.01046EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2024/01/16 12:00 a.m.8 views

WordPress plugin Contact Form by WD security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

7.2CVSS7.3AI score0.00933EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2024/01/16 12:00 a.m.10 views

WordPress plugin Newsletters security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability in the WordPress plugin...

7.2CVSS7.5AI score0.00963EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2024/01/16 12:00 a.m.16 views

WordPress plugin WordPress Database Administrator security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

9.8CVSS7.8AI score0.01046EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2024/01/16 12:00 a.m.13 views

Supplier Management System Security Vulnerability

Supplier Management System is a supplier management system. A security vulnerability exists in Campcodes Supplier Management System v1.0, which originates from a SQL injection vulnerability in the file editretailer.php...

7.2CVSS7.9AI score0.00707EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2024/01/15 12:00 a.m.22 views

WordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)

Software Schema & Structured Data for WP & AMP Type Plugin Vulnerable versions = 1.25 Fixed in 1.26 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-22146 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 017c71c1dfc3 Credits LVT-tholv2k Requir...

6.5CVSS6.6AI score0.0034EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/01/13 6:15 p.m.25 views

CVE-2024-0497

A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.7AI score0.005EPSS
SaveExploits0References3
Rows per page
Query Builder