Export limit exceeded: 47614 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (47614 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-35326 | 1 Inxedu | 1 Inxedu | 2025-04-04 | 9.8 Critical |
| SQL Injection vulnerability in file /inxedu/demo_inxedu_open/src/main/resources/mybatis/inxedu/website/WebsiteImagesMapper.xml in inxedu 2.0.6 via the id value. | ||||
| CVE-2020-22007 | 1 Okerthai | 2 G955v1, G955v1 Firmware | 2025-04-04 | 6.8 Medium |
| OS Command Injection vulnerability in OKER G955V1 v1.03.02.20161128, allows physical attackers to interrupt the boot sequence and execute arbitrary commands with root privileges. | ||||
| CVE-2024-38748 | 2 Theinnovs, Thelnnovs | 2 Eleforms, Eleforms | 2025-04-04 | 5.3 Medium |
| Access Control vulnerability in TheInnovs EleForms allows . This issue affects EleForms: from n/a through 2.9.9.9. | ||||
| CVE-2024-43142 | 1 Themeum | 1 Tutor Lms | 2025-04-04 | 4.3 Medium |
| Missing Authorization vulnerability in Themeum Tutor LMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through 2.7.3. | ||||
| CVE-2017-20170 | 1 Parontalli Project | 1 Parontalli | 2025-04-04 | 5.5 Medium |
| A vulnerability was found in ollpu parontalli. It has been classified as critical. Affected is an unknown function of the file httpdocs/index.php. The manipulation of the argument s leads to sql injection. The patch is identified as 6891bb2dec57dca6daabc15a6d2808c8896620e5. It is recommended to apply a patch to fix this issue. VDB-218418 is the identifier assigned to this vulnerability. | ||||
| CVE-2024-4595 | 1 Sem-cms | 1 Semcms | 2025-04-04 | 6.3 Medium |
| A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file function.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263317 was assigned to this vulnerability. | ||||
| CVE-2024-13193 | 1 Sem-cms | 1 Semcms | 2025-04-04 | 6.3 Medium |
| A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMS_Images.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. | ||||
| CVE-2024-31009 | 1 Sem-cms | 1 Semcms | 2025-04-04 | 6.5 Medium |
| SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php. | ||||
| CVE-2024-31010 | 1 Sem-cms | 1 Semcms | 2025-04-04 | 7.5 High |
| SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php. | ||||
| CVE-2024-11708 | 1 Mozilla | 2 Firefox, Thunderbird | 2025-04-04 | 6.5 Medium |
| Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox < 133 and Thunderbird < 133. | ||||
| CVE-2024-30860 | 1 Netentsec | 3 Application Security Gateway, Ns-asg, Ns-asg Firmware | 2025-04-04 | 8.8 High |
| netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php. | ||||
| CVE-2024-30861 | 1 Netentsec | 2 Ns-asg, Ns-asg Firmware | 2025-04-04 | 5.3 Medium |
| netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php. | ||||
| CVE-2024-30859 | 1 Netentsec | 2 Ns-asg, Ns-asg Firmware | 2025-04-04 | 8.8 High |
| netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php. | ||||
| CVE-2024-30862 | 1 Netentsec | 2 Ns-asg, Ns-asg Firmware | 2025-04-04 | 8.8 High |
| netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php. | ||||
| CVE-2024-30863 | 1 Netentsec | 2 Ns-asg, Ns-asg Firmware | 2025-04-04 | 6.3 Medium |
| netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php. | ||||
| CVE-2024-30867 | 1 Netentsec | 2 Ns-asg, Ns-asg Firmware | 2025-04-04 | 9.8 Critical |
| netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php. | ||||
| CVE-2025-1850 | 1 Codezips | 1 College Management System | 2025-04-04 | 7.3 High |
| A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some unknown functionality of the file /university.php. The manipulation of the argument book_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. | ||||
| CVE-2021-43084 | 1 Iteachyou | 1 Dreamer Cms | 2025-04-04 | 9.8 Critical |
| An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter. | ||||
| CVE-2024-52725 | 1 Sem-cms | 1 Semcms | 2025-04-04 | 4.9 Medium |
| SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMS_SeoAndTag.php component. | ||||
| CVE-2024-53502 | 1 Sem-cms | 1 Semcms | 2025-04-04 | 3.8 Low |
| Seecms v4.8 was discovered to contain a SQL injection vulnerability in the SEMCMS_SeoAndTag.php page. | ||||