Lucene search
K

7 matches found

Positive Technologies
Positive Technologies
added 2026/05/28 12:0 a.m.7 views

PT-2026-44283

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs file system where the last unlink trans field is not updated when removing a directory. This can lead to incorrect fsync behavior if a user performs an fsync...

9.8CVSS5.8AI score0.00254EPSS
Exploits12References281
Snyk
Snyk
added 2026/04/08 10:12 p.m.0 views

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization via the transaction update endpoint. An attacker can bypass intended restrictions and hide protected transaction records from normal views by sending a crafted PUT request to soft-delete synced non-manual...

6.9CVSS5.4AI score0.0001EPSS
Exploits0References2
CNVD
CNVD
added 2025/05/27 12:0 a.m.1 views

Campcodes Sales and Inventory System SQL Injection Vulnerability

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. Campcodes Sales and Inventory System suffers from a SQL injection vulnerability that stems from the mishandling of the ID parameter in the file /pages/transactionupdate.php, no details of the vulnerability a...

9.8CVSS8.1AI score0.00204EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:18 p.m.4 views

CVE-2021-32738

js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the...

6.5CVSS6.8AI score0.00069EPSS
Exploits0References1
OSV
OSV
added 2025/05/18 11:15 p.m.2 views

CVE-2025-4899

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transactionupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS5.8AI score0.00204EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/18 10:31 p.m.5 views

CVE-2025-4899 Campcodes Sales and Inventory System transaction_update.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transactionupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS7.5AI score0.00204EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/18 12:0 a.m.1 views

Campcodes Sales and Inventory System 安全漏洞

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. Campcodes Sales and Inventory System suffers from a SQL injection vulnerability that stems from the mishandling of the ID parameter in the file /pages/transactionupdate.php, no details of the vulnerability a...

9.8CVSS7.9AI score0.00204EPSS
Exploits1References6
Rows per page
Query Builder