Export limit exceeded: 46926 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (46926 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-38490 | 1 Easyvista | 1 Service Manager | 2025-04-09 | 9.6 Critical |
| An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Some parameters allow SQL injection. Version 2022.1.110.1.02 corrects this issue. | ||||
| CVE-2023-39993 | 1 Wpmet | 1 Elements Kit Elementor Addons | 2025-04-09 | 4.3 Medium |
| Missing Authorization vulnerability in Wpmet Elements kit Elementor addons.This issue affects Elements kit Elementor addons: from n/a through 2.9.0. | ||||
| CVE-2022-4855 | 1 Lead Management System Project | 1 Lead Management System | 2025-04-09 | 7.3 High |
| A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-217020. | ||||
| CVE-2022-4864 | 1 Froxlor | 1 Froxlor | 2025-04-09 | 5.4 Medium |
| Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1. | ||||
| CVE-2023-0091 | 1 Redhat | 4 Keycloak, Red Hat Single Sign On, Rhosemc and 1 more | 2025-04-09 | 3.8 Low |
| A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information. | ||||
| CVE-2022-47866 | 1 Lead Management System Project | 1 Lead Management System | 2025-04-09 | 9.8 Critical |
| Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php. | ||||
| CVE-2022-47865 | 1 Lead Management System Project | 1 Lead Management System | 2025-04-09 | 9.8 Critical |
| Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php. | ||||
| CVE-2022-47864 | 1 Lead Management System Project | 1 Lead Management System | 2025-04-09 | 9.8 Critical |
| Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php. | ||||
| CVE-2022-47862 | 1 Lead Management System Project | 1 Lead Management System | 2025-04-09 | 9.8 Critical |
| Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php. | ||||
| CVE-2022-47861 | 1 Lead Management System Project | 1 Lead Management System | 2025-04-09 | 9.8 Critical |
| Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php. | ||||
| CVE-2022-47860 | 1 Lead Management System Project | 1 Lead Management System | 2025-04-09 | 9.8 Critical |
| Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php. | ||||
| CVE-2022-47859 | 1 Lead Management System Project | 1 Lead Management System | 2025-04-09 | 9.8 Critical |
| Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php. | ||||
| CVE-2022-47790 | 1 Dynamic Transaction Queuing System Project | 1 Dynamic Transaction Queuing System | 2025-04-09 | 9.8 Critical |
| Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display&id=. | ||||
| CVE-2025-22211 | 1 Webdesigner-profi | 1 Joomshopping | 2025-04-09 | 3.4 Low |
| A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the country management area in backend. | ||||
| CVE-2025-3383 | 1 Senior-walter | 1 Web-based Pharmacy Product Management System | 2025-04-09 | 7.3 High |
| A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search/search_sales.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. | ||||
| CVE-2021-4308 | 1 Lboro | 1 Webpa | 2025-04-09 | 5.5 Medium |
| A vulnerability was found in WebPA up to 3.1.1. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. Upgrading to version 3.1.2 is able to address this issue. The identifier of the patch is 8836c4f549181e885a68e0e7ca561fdbcbd04bf0. It is recommended to upgrade the affected component. The identifier VDB-217637 was assigned to this vulnerability. | ||||
| CVE-2025-3384 | 1 1000projects | 1 Human Resource Management System | 2025-04-09 | 7.3 High |
| A vulnerability was found in 1000 Projects Human Resource Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /controller/employee.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. | ||||
| CVE-2007-10002 | 1 Web-cyradm Project | 1 Web-cyradm | 2025-04-09 | 7.3 High |
| A vulnerability, which was classified as critical, has been found in web-cyradm. Affected by this issue is some unknown functionality of the file auth.inc.php. The manipulation of the argument login/login_password/LANG leads to sql injection. The attack may be launched remotely. The name of the patch is 2bcbead3bdb5f118bf2c38c541eaa73c29dcc90f. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217640. | ||||
| CVE-2023-0105 | 1 Redhat | 4 Keycloak, Red Hat Single Sign On, Rhosemc and 1 more | 2025-04-09 | 6.5 Medium |
| A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them. | ||||
| CVE-2022-4103 | 1 Royal-elementor-addons | 1 Royal Elementor Addons | 2025-04-09 | 4.3 Medium |
| The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorisation and CSRF checks when creating a template, and does not ensure that the post created is a template. This could allow any authenticated users, such as subscriber to create a post (as well as any post type) with an arbitrary title | ||||