8.7

CVSS4.0

CVE-2025-6825 - TOTOLINK A702R HTTP POST Request formWlSiteSurvey buffer overflow

A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overโ€ฆ

๐Ÿ“… Published: June 28, 2025, 8:31 p.m. ๐Ÿ”„ Last Modified: July 8, 2025, 2:44 p.m.

8.7

CVSS4.0

CVE-2025-6824 - TOTOLINK X15 HTTP POST Request formParentControl buffer overflow

A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible toโ€ฆ

๐Ÿ“… Published: June 28, 2025, 8 p.m. ๐Ÿ”„ Last Modified: July 6, 2025, 10:16 p.m.

6.9

CVSS4.0

CVE-2025-6823 - code-projects Inventory Management System editProduct.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /php_action/editProduct.php. The manipulation of the argument editProductName leads to sql injection. The attack may be initiated remotelโ€ฆ

๐Ÿ“… Published: June 28, 2025, 7:31 p.m. ๐Ÿ”„ Last Modified: July 6, 2025, 10:16 p.m.

6.9

CVSS4.0

CVE-2025-6822 - code-projects Inventory Management System removeProduct.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /php_action/removeProduct.php. The manipulation of the argument productId leads to sql injection. The attack can be initiated remotely. Tโ€ฆ

๐Ÿ“… Published: June 28, 2025, 6:31 p.m. ๐Ÿ”„ Last Modified: July 6, 2025, 10:16 p.m.

9.8

CVSS3.1

CVE-2025-32897 - Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This security vulnerability is the same as CVE-2024-47552, but the version range described in the CVE-2024-47552 definition is too narrow. This issue affects Apache Seata (incubating): from 2.0.0 before 2.3.0. Severity โ€ฆ

๐Ÿ“… Published: June 28, 2025, 6:25 p.m. ๐Ÿ”„ Last Modified: March 30, 2026, 8:35 a.m.

6.9

CVSS4.0

CVE-2025-6821 - code-projects Inventory Management System createOrder.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /php_action/createOrder.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosโ€ฆ

๐Ÿ“… Published: June 28, 2025, 6 p.m. ๐Ÿ”„ Last Modified: July 6, 2025, 10:16 p.m.

6.9

CVSS4.0

CVE-2025-6820 - code-projects Inventory Management System createProduct.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /php_action/createProduct.php. The manipulation of the argument productName leads to sql injection. The attack may be launched remoโ€ฆ

๐Ÿ“… Published: June 28, 2025, 5:31 p.m. ๐Ÿ”„ Last Modified: July 6, 2025, 10:16 p.m.

6.9

CVSS4.0

CVE-2025-6819 - code-projects Inventory Management System removeBrand.php sql injection

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /php_action/removeBrand.php. The manipulation of the argument brandId leads to sql injection. The attack can be launchedโ€ฆ

๐Ÿ“… Published: June 28, 2025, 4:31 p.m. ๐Ÿ”„ Last Modified: July 6, 2025, 10:16 p.m.

3.3

CVSS3.1

CVE-2023-28902 - Denial of Service via integer underflow in picserver

An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause denial-of-service of the infotainment system. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part numbeโ€ฆ

๐Ÿ“… Published: June 28, 2025, 3:38 p.m. ๐Ÿ”„ Last Modified: June 30, 2025, 8:15 p.m.

3.3

CVSS3.1

CVE-2023-28903 -

An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-service of the infotainment system.

๐Ÿ“… Published: June 28, 2025, 3:38 p.m. ๐Ÿ”„ Last Modified: June 30, 2025, 8:15 p.m.
Total resulsts: 343947
Page 4323 of 34,395
ยซ previous page ยป next page
Filters