KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Błąd w FreeRDP umożliwia atakującemu wywołanie awarii klienta i potencjalne wykonanie kodu.
Błąd użycia po zwolnieniu pamięci w FreeRDP może prowadzić do awarii i potencjalnego wykonania kodu.
A weakness has been identified in ury-erp ury up to 0.2.0. This affects the function overrided_past_order_list of the file ury/ury/api/pos_extend.py. This manipulation of the argument search_term causes sql injection. Remote exploitation of the attack is possible. The exploit has been made…
Nieograniczony upload plików w Online Notes Sharing Platform umożliwia zdalne ataki.
Błąd w simple-git pozwala na wykonanie złośliwych poleceń Git przez atakującego.
Przepełnienie bufora w Tenda AC6 umożliwia zdalne wykonanie kodu.
dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the cached size becomes incorrect, and the final null terminator can be written past the buffer. With assertions disabled (default), a malicious DNS response can trigger an…
Wstrzyknięcie SQL w CodeAstro Membership Management System umożliwia nieautoryzowany dostęp do danych.
Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne ataki.
Wstrzyknięcie SQL w College Notes Uploading System umożliwia zdalne ataki.
Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne ataki.
Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne wykonanie ataku.
A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be…
A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the…
A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be…
Wstrzyknięcie SQL w Online Cake Ordering System umożliwia zdalne ataki.
A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is now…
A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admin_delete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public…
A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /update_subject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly…
A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.
A security vulnerability has been detected in itsourcecode Online Pet Shop Management System 1.0. This issue affects some unknown processing of the file /pet1/update_cnp.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been…
A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to…
A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and…
A security flaw has been discovered in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /update_program.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been…
A vulnerability was identified in itsourcecode Online Pet Shop Management System 1.0. This affects an unknown part of the file /pet1/available.php. Such manipulation of the argument Name leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Błąd w FreeRDP umożliwia atakującemu wywołanie awarii klienta i potencjalne wykonanie kodu. | Błąd w FreeRDP umożliwia atakującemu wywołanie awarii klienta i potencjalne wykonanie kodu. |
Pilne działanie | 9,8 | 0,4 % | ||
| Błąd użycia po zwolnieniu pamięci w FreeRDP może prowadzić do awarii i potencjalnego wykonania kodu. | Błąd użycia po zwolnieniu pamięci w FreeRDP może prowadzić do awarii i potencjalnego wykonania kodu. |
Pilne działanie | 9,8 | 0,4 % | ||
| A weakness has been identified in ury-erp ury up to 0.2.0. | A weakness has been identified in ury-erp ury up to 0.2.0. This affects the function overrided_past_order_list of the file ury/ury/api/pos_extend.py. This manipulation of the argument search_term causes sql injection. Remote exploitation of the attack is possible. The exploit has been made… |
Pilne działanie | 9,8 | 0,4 % | ||
| Nieograniczony upload plików w Online Notes Sharing Platform umożliwia zdalne ataki. | Nieograniczony upload plików w Online Notes Sharing Platform umożliwia zdalne ataki. |
Pilne działanie | 9,8 | 0,4 % | ||
| Błąd w simple-git pozwala na wykonanie złośliwych poleceń Git przez atakującego. | Błąd w simple-git pozwala na wykonanie złośliwych poleceń Git przez atakującego. |
Pilne działanie | 9,8 | 0,4 % | ||
| Przepełnienie bufora w Tenda AC6 umożliwia zdalne wykonanie kodu. | Przepełnienie bufora w Tenda AC6 umożliwia zdalne wykonanie kodu. |
Pilne działanie | 9,8 | 0,39 % | ||
| dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. | dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the cached size becomes incorrect, and the final null terminator can be written past the buffer. With assertions disabled (default), a malicious DNS response can trigger an… |
Pilne działanie | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w CodeAstro Membership Management System umożliwia nieautoryzowany dostęp do danych. | Wstrzyknięcie SQL w CodeAstro Membership Management System umożliwia nieautoryzowany dostęp do danych. |
Pilne działanie | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne ataki. | Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne ataki. |
Pilne działanie | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w College Notes Uploading System umożliwia zdalne ataki. | Wstrzyknięcie SQL w College Notes Uploading System umożliwia zdalne ataki. |
Pilne działanie | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne ataki. | Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne ataki. |
Pilne działanie | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,39 % | ||
| A security flaw has been discovered in itsourcecode Student Management System 1.0. | A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be… |
Pilne działanie | 9,8 | 0,39 % | ||
| A vulnerability has been found in itsourcecode Student Managemen System 1.0. | A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the… |
Pilne działanie | 9,8 | 0,39 % | ||
| A vulnerability was determined in itsourcecode Student Management System 1.0. | A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be… |
Pilne działanie | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w Online Cake Ordering System umożliwia zdalne ataki. | Wstrzyknięcie SQL w Online Cake Ordering System umożliwia zdalne ataki. |
Pilne działanie | 9,8 | 0,39 % | ||
| A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. | A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is now… |
Pilne działanie | 9,8 | 0,39 % | ||
| A weakness has been identified in code-projects Computer Book Store 1.0. | A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admin_delete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public… |
Pilne działanie | 9,8 | 0,39 % | ||
| A vulnerability was determined in itsourcecode Student Management System 1.0. | A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /update_subject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly… |
Pilne działanie | 9,8 | 0,39 % | ||
| A vulnerability was detected in itsourcecode Student Management System 1.0. | A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. |
Pilne działanie | 9,8 | 0,39 % | ||
| A security vulnerability has been detected in itsourcecode Online Pet Shop Management System 1.0. | A security vulnerability has been detected in itsourcecode Online Pet Shop Management System 1.0. This issue affects some unknown processing of the file /pet1/update_cnp.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been… |
Pilne działanie | 9,8 | 0,39 % | ||
| A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. | A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to… |
Pilne działanie | 9,8 | 0,39 % | ||
| A vulnerability was identified in code-projects Student File Management System 1.0. | A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and… |
Pilne działanie | 9,8 | 0,39 % | ||
| A security flaw has been discovered in itsourcecode Student Management System 1.0. | A security flaw has been discovered in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /update_program.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been… |
Pilne działanie | 9,8 | 0,39 % | ||
| A vulnerability was identified in itsourcecode Online Pet Shop Management System 1.0. | A vulnerability was identified in itsourcecode Online Pet Shop Management System 1.0. This affects an unknown part of the file /pet1/available.php. Such manipulation of the argument Name leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. |
Pilne działanie | 9,8 | 0,39 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.