Search Results (98282 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-4300 1 Emiloi 1 Content Management System 2025-05-13 7.3 High
A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. Affected is an unknown function of the file /search_list.php. The manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-4301 1 Emiloi 1 Content Management System 2025-05-13 7.3 High
A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /search-notice.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-32405 1 Rt-labs 1 P-net 2025-05-13 7.5 High
An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
CVE-2025-32402 1 Rt-labs 1 P-net 2025-05-13 7.5 High
An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
CVE-2025-32400 1 Rt-labs 1 P-net 2025-05-13 7.5 High
An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
CVE-2025-32398 1 Rt-labs 1 P-net 2025-05-13 7.5 High
A NULL Pointer Dereference in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
CVE-2025-32397 1 Rt-labs 1 P-net 2025-05-13 7.5 High
An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
CVE-2025-32396 1 Rt-labs 1 P-net 2025-05-13 7.5 High
An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
CVE-2025-4368 1 Tenda 2 Ac8, Ac8 Firmware 2025-05-13 8.8 High
A vulnerability, which was classified as critical, was found in Tenda AC8 16.03.34.06. Affected is the function formGetRouterStatus of the file /goform/MtuSetMacWan. The manipulation of the argument shareSpeed leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-2657 1 Projectworlds 1 Apartment Visitors Management System 2025-05-13 7.3 High
A vulnerability classified as critical was found in projectworlds Apartment Visitors Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /front.php. The manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2023-45892 1 Floorsightsoftware 1 Insight 2025-05-13 7.5 High
An issue discovered in the Order and Invoice pages in Floorsight Insights Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information.
CVE-2022-42060 1 Tenda 2 W15e, W15e Firmware 2025-05-13 7.5 High
Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setWanPpoe function. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
CVE-2022-41544 1 Get-simple 1 Getsimple Cms 2025-05-13 8.8 High
GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php.
CVE-2022-2527 1 Gitlab 1 Gitlab 2025-05-13 7.3 High
An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2.which allowed an authenticated attacker to inject arbitrary content. A victim interacting with this content could lead to arbitrary requests.
CVE-2022-25750 1 Qualcomm 30 Kailua, Kailua Firmware, Sg8275 and 27 more 2025-05-13 8.4 High
Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile
CVE-2022-25723 1 Qualcomm 16 Sd 8 Gen1 5g Firmware, Sm8475, Wcd9380 and 13 more 2025-05-13 8.4 High
Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile
CVE-2025-2658 1 Phpgurukul 1 Online Security Guards Hiring System 2025-05-13 7.3 High
A vulnerability, which was classified as critical, has been found in PHPGurukul Online Security Guards Hiring System 1.0. Affected by this issue is some unknown functionality of the file /search-request.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-2663 1 Phpgurukul 1 Bank Locker Management System 2025-05-13 7.3 High
A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /search-locker-details.php. The manipulation of the argument searchinput leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-4311 1 Emiloi 1 Content Management System 2025-05-13 7.3 High
A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /admin/update_main_topic_img.php?topic_id=529. The manipulation of the argument stopic_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2022-23769 2 Megazone, Microsoft 2 Reversewall-mds, Windows 2025-05-13 7.5 High
Remote code execution vulnerability due to insufficient user privilege verification in reverseWall-MDS. Remote attackers can exploit the vulnerability such as stealing account, through remote code execution.