Lucene search
+L

1963 matches found

Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.8 views

PT-2025-47208

Name of the Vulnerable Software and Affected Versions itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description A SQL injection issue exists in itsourcecode Web-Based Internet Laboratory Management System version 1.0. The issue is located in an unknown functionality of...

7.5CVSS7.2AI score0.00387EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2025/11/15 12:47 a.m.21 views

CVE-2024-44639

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...

6.5CVSS8AI score0.0024EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/11/15 12:00 a.m.8 views

FantasticLBP Hotels Server SQL注入漏洞

FantasticLBP Hotels Server is a backend management system for hotel reservation system. FantasticLBP Hotels Server has a SQL injection vulnerability, the vulnerability stems from the incorrect operation of the parameter subjectId/cityName in the file controller/api/hotelList.php, which may lead t...

6.5CVSS7AI score0.00238EPSS
SaveExploits0References7
NVD
NVD
added 2025/11/14 4:15 p.m.12 views

CVE-2024-44639

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/14 12:00 a.m.15 views

PHPGurukul Student Record System 安全漏洞

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the sub1, sub2, sub3, sub4, and course-short parameters of add-subject.php. An attacker can exploit this...

6.5CVSS8.1AI score0.0024EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/11/14 12:00 a.m.11 views

PT-2025-46969

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.2.0 Description The software contains a SQL Injection flaw through the sub1, sub2, sub3, sub4, and course-short parameters in the 'add-subject.php' file. This allows for potential unauthorized databas...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/11/14 12:00 a.m.10 views

EUVD-2024-55080

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/11/14 12:00 a.m.6 views

CVE-2024-44639

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...

7.6AI score0.0024EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/11/14 12:00 a.m.10 views

EUVD-2024-55078

Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country,...

6.5CVSS7.1AI score0.0024EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/11/14 12:00 a.m.18 views

CVE-2024-44639

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...

0.0024EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/11 12:41 a.m.1 views

MAL-2025-70906 Malicious code in subjective-sapphire-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0f9664f27f7cb06ae899154704a7c3e9bc2910086231813fea7354ec0779a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/11/11 12:00 a.m.11 views

Introducing Nylon Face Mask Attacks: A Dataset for Evaluating Generalised Face Presentation Attack Detection

Face recognition systems are increasingly deployed across a wide range of applications, including smartphone authentication, access control, and border security. However, these systems remain vulnerable to presentation attacks PAs, which can significantly compromise their reliability. In this wor...

6.8AI score
SaveExploits0
CNNVD
CNNVD
added 2025/11/10 12:00 a.m.10 views

编号撤回

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2025.3.104432, which...

6.4AI score0.00005EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/29 5:54 p.m.4 views

OPENSUSE-SU-2025:20021-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: Mozilla Thunderbird 140.3.0 ESR: Right-clicking 'List-ID' - 'Unsubscribe' created double encoded draft subject Thunderbird could crash on startup Thunderbird could crash when importing mail Opening Websi...

8.8CVSS6.9AI score0.00737EPSS
SaveExploits0References8
Broadcom
Broadcom
added 2025/10/15 12:00 a.m.18 views

A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing

GNU TLS is vulnerable to a denial-of-service DoS due to inefficient certificate processing in the libtasn1 library. An attacker could present a maliciously crafted certificate that contains a large amount of subject alternative name or name constraint inputs, potentially leading to excessive...

5.3CVSS6.9AI score0.01266EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2025/10/10 5:50 a.m.13 views

gnutls security, bug fix, and enhancement update

An update is available for gnutls. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnutls packages provide the GNU Transport Layer Security GnuTLS library,...

8.2CVSS6.9AI score0.01244EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.9 views

CVE-2025-60304

code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...

6.1CVSS6.3AI score0.00213EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/09 6:30 p.m.8 views

EUVD-2025-33359

code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...

6.1CVSS5.7AI score0.00213EPSS
SaveExploits1References3
NVD
NVD
added 2025/10/09 5:16 p.m.12 views

CVE-2025-60304

code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...

6.1CVSS0.00213EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/09 5:16 p.m.8 views

CVE-2025-60304

code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...

6.1CVSS5.8AI score0.00213EPSS
SaveExploits1References2
Rows per page
Query Builder