Lucene search
+L

8126 matches found

Vulnrichment
Vulnrichment
•added 2024/03/30 10:31 a.m.•14 views

CVE-2024-3087 PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this issue is some unknown functionality of the file ambulance-tracking.php of the component Ambulance Tracking Page. The manipulation of the argument searchdata lead...

7.5CVSS7.3AI score0.00765EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/03/30 10:31 a.m.•38 views

CVE-2024-3087 PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this issue is some unknown functionality of the file ambulance-tracking.php of the component Ambulance Tracking Page. The manipulation of the argument searchdata lead...

7.5CVSS7.7AI score0.00765EPSS
SaveExploits1References4
OSV
OSV
•added 2024/03/30 9:15 a.m.•17 views

CVE-2024-3086

A vulnerability classified as problematic was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this vulnerability is an unknown functionality of the file ambulance-tracking.php of the component Ambulance Tracking Page. The manipulation of the argument searchdata leads to cro...

6.1CVSS3.8AI score0.00666EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/03/30 9:00 a.m.•22 views

CVE-2024-3086 PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php cross site scripting

A vulnerability classified as problematic was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this vulnerability is an unknown functionality of the file ambulance-tracking.php of the component Ambulance Tracking Page. The manipulation of the argument searchdata leads to cro...

5CVSS6.2AI score0.00666EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/03/30 9:00 a.m.•52 views

CVE-2024-3086 PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php cross site scripting

A vulnerability classified as problematic was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this vulnerability is an unknown functionality of the file ambulance-tracking.php of the component Ambulance Tracking Page. The manipulation of the argument searchdata leads to cro...

5CVSS4.7AI score0.00666EPSS
SaveExploits1References4
CVE
CVE
•added 2024/03/30 9:00 a.m.•95 views

CVE-2024-3086

CVE-2024-3086 affects PHPGurukul Emergency Ambulance Hiring Portal 1.0 (Ambulance Tracking Page , file ambulance-tracking.php__). The flaw is a cross-site scripting (XSS) vulnerability caused by manipulating the searchdata parameter, enabling remote exploitation. Public exploit details exist; rem...

6.1CVSS4.4AI score0.00666EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/03/30 12:00 a.m.•24 views

PT-2024-23647 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A critical issue has been found in the Ambulance Tracking Page component, specifically in the file ambulance-tracking.php. The manipulation of the searchdata argument leads...

9.8CVSS8.1AI score0.00765EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/03/30 12:00 a.m.•24 views

PT-2024-23637 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A problematic issue was found in the Ambulance Tracking Page component, specifically in the file ambulance-tracking.php. The manipulation of the searchdata argument leads t...

6.1CVSS6.9AI score0.00666EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2024/03/30 12:00 a.m.•16 views

PHPGurukul Emergency Ambulance Hiring Portal SQL注入漏洞

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. The Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the searchdata parameter of the ambulance-tracking.php file of t...

9.8CVSS8.2AI score0.00765EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/30 12:00 a.m.•3 views

CVE-2024-3087: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this issue is some unknown functionality of the file ambulance-tracking.php of the component Ambulance Tracking Page. The manipulation of the argument searchdata lead...

9.8CVSS5.5AI score0.00765EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/03/30 12:00 a.m.•30 views

PHPGurukul Emergency Ambulance Hiring Portal 安全漏洞

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the searchdata parameter of the ambulance-tracking.p...

6.1CVSS6AI score0.00666EPSS
SaveExploits1References5
OSV
OSV
•added 2024/03/29 11:06 a.m.•16 views

OESA-2024-1344 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix wild memory access when clearing fragments while testing re-assembly/re-fragmentation using actct, it's possible to observe a crash like th...

7.8CVSS7.6AI score0.00585EPSS
SaveExploits0References12
NVD
NVD
•added 2024/03/28 2:15 p.m.•42 views

CVE-2024-29200

Kimai is a web-based multi-user time-tracking application. The permission viewothertimesheet performs differently for the Kimai UI and the API, thus returning unexpected data through the API. When setting the viewothertimesheet permission to true, on the frontend, users can only see timesheet...

6.8CVSS6.4AI score0.00644EPSS
SaveExploits1References1
CVE
CVE
•added 2024/03/28 1:28 p.m.•105 views

CVE-2024-29200

Kimai API flaw CVE-2024-29200 exposes timesheet entries to users who should be restricted. The issue stems from inconsistent handling of the view_other_timesheet permission between the UI and API, where the UI restricts data to a user’s teams but the API returns all timesheets when querying /api/...

6.8CVSS6.4AI score0.00644EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/03/28 12:00 a.m.•12 views

PT-2024-2504 · Dell · Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x Description: The issue is related to the tracking of symbolic links in the PowerScale OneFS operating system. Exploitation of this issue may allow an attacker to cause a denial of service...

6CVSS6.9AI score0.0019EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2024/03/28 12:00 a.m.•18 views

The vulnerability of the DHCP tracking function in Cisco IOS XE allows a intruder to trigger a service failure.

The vulnerability of the DHCP tracking function in Cisco IOS XE operating systems is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending a specially crafted IPv4...

8.6CVSS5.5AI score0.00816EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/03/26 5:49 p.m.•18 views

CVE-2023-52625 drm/amd/display: Refactor DMCUB enter/exit idle interface

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Refactor DMCUB enter/exit idle interface Why We can hang in place trying to send commands when the DMCUB isn't powered on. How We need to exit out of the idle state prior to sending a command, but the process tha...

6AI score
SaveExploits0References5
NVD
NVD
•added 2024/03/26 12:15 p.m.•29 views

CVE-2024-24711

Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11...

4.3CVSS4.7AI score0.00318EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/26 11:43 a.m.•82 views

CVE-2024-24711

CVE-2024-24711 refers to a Missing Authorization vulnerability in the WordPress plugin WooCommerce Conversion Tracking (weDevs) affecting versions n/a–2.11. The issue arises from a missing capability check on the wcct_install_happy_addons function, allowing authenticated users (e.g., subscribers)...

4.3CVSS8.6AI score0.00318EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/26 11:43 a.m.•35 views

CVE-2024-24711 WordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11...

4.3CVSS5AI score0.00318EPSS
SaveExploits0References1
Rows per page
Query Builder