Search Results (98299 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-41302 1 Autodesk 1 Fbx Software Development Kit 2025-05-14 7.8 High
An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020. and prior may lead to code execution or information disclosure through maliciously crafted FBX files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVE-2022-3131 1 Codexpert 1 Search Logger 2025-05-14 7.2 High
The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users
CVE-2022-33217 1 Qualcomm 16 Sd 8 Gen1 5g Firmware, Sm8475, Wcd9380 and 13 more 2025-05-14 7.8 High
Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile
CVE-2025-2062 1 Projectworlds 1 Life Insurance Management System 2025-05-14 7.3 High
A vulnerability classified as critical has been found in projectworlds Life Insurance Management System 1.0. Affected is an unknown function of the file /clientStatus.php. The manipulation of the argument client_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-2063 1 Projectworlds 1 Life Insurance Management System 2025-05-14 7.3 High
A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleteNominee.php. The manipulation of the argument nominee_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-2064 1 Projectworlds 1 Life Insurance Management System 2025-05-14 7.3 High
A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file /deletePayment.php. The manipulation of the argument recipt_no leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-2065 1 Projectworlds 1 Life Insurance Management System 2025-05-14 7.3 High
A vulnerability, which was classified as critical, was found in projectworlds Life Insurance Management System 1.0. This affects an unknown part of the file /editAgent.php. The manipulation of the argument agent_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-2066 1 Projectworlds 1 Life Insurance Management System 2025-05-14 7.3 High
A vulnerability has been found in projectworlds Life Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /updateAgent.php. The manipulation of the argument agent_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-2067 1 Projectworlds 1 Life Insurance Management System 2025-05-14 7.3 High
A vulnerability was found in projectworlds Life Insurance Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-48245 1 Janobe 1 Vehicle Management System 2025-05-14 7.2 High
Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in various administrative actions, such as booking a vehicle or confirming a booking. The affected parameters include "Booking ID", "Action Name", and "Payment Confirmation ID", which are present in /newvehicle.php and /newdriver.php.
CVE-2024-44587 2 Adonesevangelista, Itsourcecode 2 Restaurant Management System, Alton Management System 2025-05-14 8.8 High
itsourcecode Alton Management System 1.0 is vulnerable to SQL Injection in /noncombo_save.php via the "menu" parameter.
CVE-2024-37871 2 Emiloi, Itsourcecode 2 Online Discussion Forum, Online Discussion Forum 2025-05-14 8.2 High
SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter.
CVE-2024-37872 2 Angeljudesuarez, Itsourcecode 2 Billing System, Billing System 2025-05-14 8.1 High
SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVE-2022-42488 1 Openharmony 1 Openharmony 2025-05-14 8.4 High
OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services.
CVE-2024-6235 1 Citrix 1 Netscaler Console 2025-05-14 8.8 High
Sensitive information disclosure in NetScaler Console
CVE-2022-42234 1 Ucms Project 1 Ucms 2025-05-14 8.8 High
There is a file inclusion vulnerability in the template management module in UCMS 1.6
CVE-2022-41585 1 Huawei 2 Emui, Harmonyos 2025-05-14 7.8 High
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.
CVE-2022-41584 1 Huawei 2 Emui, Harmonyos 2025-05-14 7.8 High
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.
CVE-2022-41583 1 Huawei 2 Emui, Harmonyos 2025-05-14 7.5 High
The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module.
CVE-2022-41582 1 Huawei 2 Emui, Harmonyos 2025-05-14 7.5 High
The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.