Lucene search
+L

448 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:38 p.m.15 views

CVE-2020-5193

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter...

6.1CVSS6.3AI score0.00923EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/05/22 9:00 a.m.20 views

CVE-2013-6040

MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions 4.0 of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue...

9.3CVSS7.2AI score0.07373EPSS
SaveExploits7References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:21 a.m.18 views

CVE-2019-1010202

Jeesite 1.2.7 is affected by: XML External Entity XXE. The impact is: sensitive information disclosure. The component is: convertToModel function in src/main/java/com.thinkgem.jeesite/modules/act/service/ActProcessService.java. The attack vector is: network connectivity,authenticated,must upload ...

6.5CVSS6.5AI score0.01312EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:49 a.m.11 views

CVE-2019-1010201

Jeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The component is: updateProcInsIdByBusinessId function in src/main/java/com.thinkgem.jeesite/modules/act/ActDao.java has SQL Injection vulnerability. The attack vector is: network...

6.5CVSS7.7AI score0.01155EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/22 12:00 a.m.36 views

PT-2025-17562 · Unknown · Hospital Management System +1

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: The issue is related to an arbitrary file upload vulnerability in the /jquery-file-upload/server/php/index.php component. This allows an unauthenticated attacker to upload any file to the...

9.8CVSS7.1AI score0.0114EPSS
SaveExploits1References6
NVD
NVD
added 2025/04/17 4:15 p.m.7 views

CVE-2025-22692

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rachanaS Sponsered Link sponsered-link allows Reflected XSS.This issue affects Sponsered Link: from n/a through = 4.0...

7.1CVSS0.00278EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/14 12:00 a.m.9 views

Fannuo Enterprise Content Management System 安全漏洞

Fannuo Enterprise Content Management System is a content management system from Fannuo, China. A security vulnerability exists in Fannuo Enterprise Content Management System version 1.1 and 4.0, which originates from an improper operation of the parameter del in the file admin/cmschip.php, which...

6.5CVSS6.9AI score0.00309EPSS
SaveExploits0References5
CVE
CVE
added 2025/02/24 2:48 p.m.75 views

CVE-2025-27276

CVE-2025-27276: Photo Gallery ( Responsive ) plugin for WordPress is affected by a CSRF to Privilege Escalation flaw in versions prior to 4.0. Connected sources corroborate that Photo Gallery ( Responsive )

8.8CVSS7.2AI score0.00204EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/24 2:48 p.m.13 views

CVE-2025-27276 WordPress Photo Gallery ( Responsive ) plugin <= 4.0 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in lizeipe Photo Gallery Responsive photo-gallery-pearlbells allows Privilege Escalation.This issue affects Photo Gallery Responsive : from n/a through = 4.0...

8.8CVSS7.2AI score0.00204EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/21 12:25 a.m.15 views

CVE-2023-51300

PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting XSS vulnerabilities in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters...

6.1CVSS6AI score0.00379EPSS
SaveExploits2
OSV
OSV
added 2025/01/21 3:15 p.m.8 views

CVE-2024-56997

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /doctor/index.php via the 'Email' parameter...

4.2CVSS5.8AI score0.00203EPSS
SaveExploits1References1
NVD
NVD
added 2025/01/07 8:15 a.m.16 views

CVE-2024-11626

Improper Neutralization of Input During CMS Backend adminstrative section Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Progress Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from...

8.4CVSS0.00357EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/12/30 12:00 a.m.12 views

Photon OS 4.0: Ruby PHSA-2024-4.0-0724

An update of the ruby package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0724. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

8.7CVSS7.3AI score0.0142EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/21 12:00 a.m.16 views

PT-2024-31930 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns cross-site scripting vulnerabilities in the PHPGurukul Hospital Management System. These vulnerabilities exist via the docname parameter in...

5.9CVSS6.4AI score0.00284EPSS
SaveExploits1References4
NVD
NVD
added 2024/10/17 1:15 p.m.15 views

CVE-2024-48031

Cross-Site Request Forgery CSRF vulnerability in sumitsurai Featured Posts with Multiple Custom Groups FPMCG featured-posts-with-multiple-custom-groups-fpmcg allows Cross Site Request Forgery.This issue affects Featured Posts with Multiple Custom Groups FPMCG: from n/a through = 4.0...

6.5CVSS0.00203EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/17 12:15 p.m.53 views

CVE-2024-48031

CVE-2024-48031 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Featured Posts with Multiple Custom Groups (FPMCG) , version

6.5CVSS5.9AI score0.00203EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/17 12:00 a.m.14 views

WordPress plugin Featured Posts with Multiple Custom Groups 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress...

7.1CVSS6AI score0.00255EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/23 4:15 p.m.28 views

CVE-2024-42523

publiccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin/cmsTemplate/saveMetaData...

7.2CVSS0.0051EPSS
SaveExploits1References2
OSV
OSV
added 2024/07/31 8:15 a.m.15 views

CVE-2023-28074

Dell BSAFE Crypto-C Micro Edition, version 4.1.5, and Dell BSAFE Micro Edition Suite, versions 4.0 through 4.6.1 and version 5.0, contains an Out-of-bounds Read vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information exposu...

7.1CVSS5.8AI score0.0015EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/31 7:56 a.m.37 views

CVE-2023-28074

Dell BSAFE Crypto-C Micro Edition, version 4.1.5, and Dell BSAFE Micro Edition Suite, versions 4.0 through 4.6.1 and version 5.0, contains an Out-of-bounds Read vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information exposu...

6.2CVSS0.0015EPSS
SaveExploits0References1
Rows per page
Query Builder