Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,826

CVE-2018-25030

Mirmay Secure Private Browser / File Manager Auto Lock improper authentication

A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race condition leads to a local authentication bypass. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Mirmay
Products
File Manager Secure Private Browser
CVE-2005-10001

Netegrity SiteMinder Login smpwservicescgi.exe redirect

A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Broadcom
Products
Symantec Siteminder
CVE-2008-10001

Pro2col Stingray FTS cross site scriting

A vulnerability, which was classified as problematic, has been found in Pro2col Stingray FTS. The manipulation of the argument Username leads to cross site scripting. The attack may be initiated remotely. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Pro2col
Products
Stingray Fts
CVE-2010-10001

Shemes GrabIt NZB Date Parser denial of service

A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Parser. The manipulation of the argument date with the input 1000000000000000 as part of a NZB File leads to a denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Shemes
Products
Grabit
CVE-2017-20011

WEKA INTEREST Security Scanner HTTP denial of service

A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects some unknown processing of the component HTTP Handler. The manipulation with an unknown input leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

CVSS 3.1 · 2.8 Low EPSS < 1% KEV · Not listed
Vendors
Weka
Products
Interest Security Scanner
CVE-2022-1074

TEM FLEX-1085 injection

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input <h1>HTML Injection</h1> in the WiFi settings of the dashboard leads to html injection.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Tem
Products
Flex-1085 Flex-1085 Firmware
CVE-2022-1075

College Website Management System Contact cross site scripting

A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/classes/Master.php?f=save_contact of the component Contact Handler. The manipulation leads to persistent cross site scripting. The attack may be launched remotely and requires authentication.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
College Website Management System Project
Products
College Website Management System
CVE-2022-1076

Automatic Question Paper Generator System My Account Page login.php cross site scripting

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is possible to initiate the attack remotely.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Automatic Question Paper Generator System Project
Products
Automatic Question Paper Generator System
CVE-2025-3036

yzk2356911358 StudentServlet-JSP Student Management cross site scripting

A vulnerability, which was classified as problematic, was found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991. This affects an unknown part of the component Student Management Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Yzk2356911358
Products
Studentservlet-jsp
CVE-2022-1077

TEM FLEX-1080/FLEX-1085 Log information disclosure

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any form of authentication.

CVSS 3.1 · 5.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Tem
Products
Flex-1080 Flex-1080 Firmware Flex-1085 and 1 more
CVE-2022-1078

SourceCodester College Website Management System sql injection

A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file /cwms/admin/?page=articles/view_article/. The manipulation of the argument id with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc with an unknown input leads to sql injection. It is possible to launch the attack remotely and without authentication.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
College Website Management System Project
Products
College Website Management System
CVE-2022-1079

SourceCodester One Church Management System churchprofile.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
One Church Management System Project
Products
One Church Management System
CVE-2022-1080

SourceCodester One Church Management System attendancy.php sql injection

A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vulnerability affects code of the file attendancy.php as the manipulation of the argument search2 leads to sql injection. The attack can be initiated remotely.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
One Church Management System Project
Products
One Church Management System
CVE-2022-1081

SourceCodester Microfinance Management System addcustomerHandler.php cross site scripting

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument first_name, middle_name, and surname leads to cross site scripting. The attack can be initiated remotely.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microfinance Management System Project
Products
Microfinance Management System
CVE-2022-1082

SourceCodester Microfinance Management System Login Page login.php sql injection

A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1# leads to sql injection. The attack may be initiated remotely.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Microfinance Management System Project
Products
Microfinance Management System
CVE-2022-1083

Microfinance Management System sql injection

A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customer_type_number/account_number/account_status_number/account_type_number with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc leads to sql injection in multiple files. It is possible to launch the attack remotely.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Microfinance Management System Project
Products
Microfinance Management System
CVE-2022-1084

SourceCodester One Church Management System Session userregister.php improper authentication

A vulnerability classified as critical was found in SourceCodester One Church Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /one_church/userregister.php. The manipulation leads to authentication bypass. The attack can be launched remotely.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
One Church Management System Project
Products
One Church Management System
CVE-2022-1085

CLTPHP POST Parameter cross site scripting

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Cltphp
Products
Cltphp
CVE-2022-1087

htmly Edit Profile Module cross site scripting

A vulnerability, which was classified as problematic, has been found in htmly 5.3 whis affects the component Edit Profile Module. The manipulation of the field Title with script tags leads to persistent cross site scripting. The attack may be initiated remotely and requires an authentication. A simple POC has been disclosed to the public and may be used.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Htmly
Products
Htmly