7.1

CVSS4.0

CVE-2025-2260 - Eclipse ThreadX NetX Duo HTTP component server denial of service

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause a denial of service by specially crafted packets. The core issue is missing closing of a file in case of an error condition, resulting in the 404 error for each further file request. Users …

📅 Published: April 6, 2025, 6:56 p.m. 🔄 Last Modified: July 31, 2025, 4:31 p.m.

5.3

CVSS4.0

CVE-2025-2258 - Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow

In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length smaller than the data request size. A po…

📅 Published: April 6, 2025, 6:50 p.m. 🔄 Last Modified: July 31, 2025, 4:34 p.m.

5.3

CVSS4.0

CVE-2025-3318 - Kenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 ShangpinleixingController.java page sql inject…

A vulnerability classified as critical was found in Kenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 1.0. Affected by this vulnerability is the function page of the file src/main/java/com/controller/ShangpinleixingController.java. The manipulation of the argument sort leads to sql injection. Th…

📅 Published: April 6, 2025, 2 p.m. 🔄 Last Modified: April 8, 2025, 6:54 p.m.

5.3

CVSS4.0

CVE-2025-3317 - fumiao opencms dataPage.jsp path traversal

A vulnerability classified as problematic has been found in fumiao opencms up to a0fafa5cff58719e9b27c2a2eec204cc165ce14f. Affected is an unknown function of the file opencms-dev/src/main/webapp/view/admin/document/dataPage.jsp. The manipulation of the argument path leads to path traversal. It is p…

📅 Published: April 6, 2025, 11:31 a.m. 🔄 Last Modified: Nov. 4, 2025, 6:56 p.m.

6.9

CVSS4.0

CVE-2025-3316 - PHPGurukul Men Salon Management System search-invoices.php sql injection

A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The ex…

📅 Published: April 6, 2025, 11 a.m. 🔄 Last Modified: May 7, 2025, 4:45 p.m.

6.9

CVSS4.0

CVE-2025-3315 - SourceCodester Apartment Visitor Management System view-report.php sql injection

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remo…

📅 Published: April 6, 2025, 10 a.m. 🔄 Last Modified: May 14, 2025, 9:02 p.m.

6.9

CVSS4.0

CVE-2025-3314 - SourceCodester Apartment Visitor Management System forgotpw.php sql injection

A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forgotpw.php. The manipulation of the argument secode leads to sql injection. The attack can be launched remot…

📅 Published: April 6, 2025, 8:31 a.m. 🔄 Last Modified: May 14, 2025, 9:02 p.m.

6.9

CVSS4.0

CVE-2025-3313 - PHPGurukul Men Salon Management System add-customer.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Men Salon Management System 1.0. Affected is an unknown function of the file /admin/add-customer.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit ha…

📅 Published: April 6, 2025, 8 a.m. 🔄 Last Modified: May 7, 2025, 4:45 p.m.

6.9

CVSS4.0

CVE-2025-3312 - PHPGurukul Men Salon Management System add-customer-services.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Men Salon Management System 1.0. This issue affects some unknown processing of the file /admin/add-customer-services.php. The manipulation of the argument sids[] leads to sql injection. The attack may be initiated remot…

📅 Published: April 6, 2025, 7 a.m. 🔄 Last Modified: May 7, 2025, 4:45 p.m.

6.9

CVSS4.0

CVE-2025-3311 - PHPGurukul Men Salon Management System about-us.php sql injection

A vulnerability classified as critical was found in PHPGurukul Men Salon Management System 1.0. This vulnerability affects unknown code of the file /admin/about-us.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be initiated remotely. The exploit has been disc…

📅 Published: April 6, 2025, 6:31 a.m. 🔄 Last Modified: May 28, 2025, 9:08 p.m.
Total resulsts: 343968
Page 5478 of 34,397
« previous page » next page
Filters