[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 425103
> CVE-2023-52392
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-51755
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-51754
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-50337
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-50336
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-50335
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-50329
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-50293
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-50241
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-50174
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-50170
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-49872
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-49870
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-49811
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-49712
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-49710
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-49611
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-49609
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-49590
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-49588
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-48734
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-48729
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-45850
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-45738
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-45224
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-43749
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-42775
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-42665
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-42437
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-39450
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-38262
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-38137
[PUBLISHED: 2024-02-14]
Rejected reason: This is unused.
> CVE-2023-27975 [HIGH 7.1]
[PUBLISHED: 2024-02-14] [EPSS 0.15%]
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Control Expert when a local user tampers with the memory of the engineering workstation.
AFFECTED_PRODUCTS: Schneider Electric Ecostruxure Control Expert, Schneider Electric Ecostruxure Process Expert
> CVE-2023-50868 [HIGH 7.5]
[PUBLISHED: 2024-02-14] [âš¡ EPSS 74.3%]
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification imp...
> CVE-2023-50387 [HIGH 7.5]
[PUBLISHED: 2024-02-14] [âš¡ EPSS 100.0%]
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG r...
AFFECTED_PRODUCTS: Red Hat Enterprise Linux, Red Hat Enterprise Linux, Red Hat Enterprise Linux ... (+13)
> CVE-2024-25226 [MEDIUM 6.1]
[PUBLISHED: 2024-02-14] [EPSS 0.38%]
A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function.
AFFECTED_PRODUCTS: Code-Projects Simple Admin Panel
> CVE-2024-25225 [MEDIUM 5.4]
[PUBLISHED: 2024-02-14] [EPSS 0.41%]
A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function.
AFFECTED_PRODUCTS: Code-Projects Simple Admin Panel
> CVE-2024-25224 [MEDIUM 5.4]
[PUBLISHED: 2024-02-14] [EPSS 0.38%]
A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Size Number parameter under the Add Size function.
AFFECTED_PRODUCTS: Code-Projects Simple Admin Panel
> CVE-2024-25223 [CRITICAL 9.8]
[PUBLISHED: 2024-02-14] [EPSS 0.63%]
Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php.
AFFECTED_PRODUCTS: Code-Projects Simple Admin Panel
> CVE-2024-25222 [CRITICAL 9.8]
[PUBLISHED: 2024-02-14] [EPSS 0.75%]
Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php.
AFFECTED_PRODUCTS: Task Manager In Php With Source Code Project Task Manager In Php With Source Code
> CVE-2024-25221 [MEDIUM 6.1]
[PUBLISHED: 2024-02-14] [EPSS 0.41%]
A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php.
AFFECTED_PRODUCTS: Task Manager In Php With Source Code Project Task Manager In Php With Source Code
> CVE-2024-25220 [CRITICAL 9.8]
[PUBLISHED: 2024-02-14] [EPSS 0.68%]
Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php.
AFFECTED_PRODUCTS: Task Manager In Php With Source Code Project Task Manager In Php With Source Code
> CVE-2024-25219 [MEDIUM 6.1]
[PUBLISHED: 2024-02-14] [EPSS 0.46%]
A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Task Name parameter /TaskManager/Task.php.
AFFECTED_PRODUCTS: Task Manager In Php With Source Code Project Task Manager In Php With Source Code
> CVE-2024-25218 [MEDIUM 6.1]
[PUBLISHED: 2024-02-14] [EPSS 0.41%]
A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Project Name parameter /TaskManager/Projects.php.
AFFECTED_PRODUCTS: Task Manager In Php With Source Code Project Task Manager In Php With Source Code
> CVE-2024-25217 [CRITICAL 9.8]
[PUBLISHED: 2024-02-14] [EPSS 0.69%]
Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/view_product.
AFFECTED_PRODUCTS: Oretnom23 Online Medicine Ordering System
> CVE-2024-25216 [CRITICAL 9.8]
[PUBLISHED: 2024-02-14] [EPSS 0.71%]
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php.
AFFECTED_PRODUCTS: Sherlock Employee Management System
> CVE-2024-25215 [CRITICAL 9.8]
[PUBLISHED: 2024-02-14] [EPSS 0.73%]
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php.
AFFECTED_PRODUCTS: Sherlock Employee Management System
> CVE-2024-25214 [CRITICAL 9.8]
[PUBLISHED: 2024-02-14] [EPSS 0.98%]
An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html.
AFFECTED_PRODUCTS: Sherlock Employee Management System
> CVE-2024-25213 [HIGH 7.2]
[PUBLISHED: 2024-02-14] [EPSS 0.72%]
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php.
AFFECTED_PRODUCTS: Sherlock Employee Management System
> CVE-2024-25212 [HIGH 7.2]
[PUBLISHED: 2024-02-14] [EPSS 0.72%]
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php.
AFFECTED_PRODUCTS: Sherlock Employee Management System