Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.
SQL injection in the admin login page of PHPGurukul Zoo Management System 2.1 allows remote unauthenticated attackers to extract or modify database contents via the Username parameter. Public exploit code is available, making exploitation straightforward despite the limited confidentiality, integrity, and availability impact. The EPSS score of 1.94% (83rd percentile) indicates a moderate likelihood of exploitation, though no active exploitation is confirmed.
SQL injection in the forgot-password.php script of PHPGurukul/Campcodes Cyber Cafe Management System 1.0 allows remote, unauthenticated attackers to manipulate the email parameter, leading to database compromise via arbitrary SQL queries. The exploit is publicly disclosed, and while EPSS indicates a low exploitation probability (0.07%), no active exploitation has been confirmed (not in CISA KEV).
SQL injection in Cyber Cafe Management System 1.0 allows remote unauthenticated attackers to manipulate the Username parameter of /index.php to execute arbitrary SQL commands. A publicly available proof-of-concept exists, and the EPSS score of 0.07% suggests low exploitation probability at time of analysis. No evidence of active exploitation in the wild beyond public disclosure has been found.
SQL injection in code-projects Crime Reporting System 1.0 allows remote attackers to inject arbitrary SQL via the email parameter of /headlogin.php. A public exploit exists but active exploitation is not confirmed; the EPSS probability is very low (0.07%). This vulnerability can lead to limited data exposure or manipulation.
SQL injection in code-projects Library System 1.0 allows unauthenticated remote attackers to manipulate database queries via the ID parameter in /approve.php. The flaw permits low-impact unauthorized data access, modification, or service disruption. Public exploit code is available, but the software is a small demo project with minimal enterprise presence.
SQL injection in code-projects Library System 1.0 allows unauthenticated remote attackers to execute arbitrary SQL commands via the Search parameter in /user/teacher/books.php. Exploit code is publicly available, but no active exploitation has been confirmed through CISA KEV, and EPSS scores indicate low weaponization likelihood.
SQL injection in Campcodes Sales and Inventory System 1.0 allows remote unauthenticated attackers to inject malicious SQL via the Customer parameter of /pages/customer_account.php, potentially leading to data exfiltration or modification. Public exploit code is available, but the EPSS score is low (0.06%) and there is no indication of active exploitation at this time.
SQL injection in code-projects Staff Audit System 1.0 allows unauthenticated remote attackers to manipulate login queries via the User parameter in /login.php, potentially leading to unauthorized data access or authentication bypass. A public exploit is available, but EPSS probability is low (0.06%), suggesting limited exploitation pressure. No CISA KEV listing exists.
SQL injection in code-projects Library System 1.0 allows remote attackers to manipulate the Username parameter in /add-teacher.php, leading to unauthorized database access and potential data manipulation. A public exploit is available, though no active exploitation has been confirmed. The vulnerability carries a CVSS 4.0 base score of 5.5 and an extremely low EPSS probability (0.06%).
SQL injection in Food Distributor Site 1.0 allows remote attackers to manipulate the Username parameter on the admin login page to execute arbitrary SQL commands. Exploit code is publicly available, though EPSS indicates very low probability of exploitation (0.06%) and it is not listed in CISA KEV. An attacker could bypass authentication or extract sensitive data from the database.
SQL injection in PHPGurukul Hospital Management System 1.0 allows remote attackers to manipulate the viewid parameter in view-medhistory.php, leading to unauthorized database access. A public proof-of-concept exploit is available, though EPSS indicates a very low probability of widespread exploitation. No vendor patch has been confirmed at this time.
SQL injection in code-projects Library System 1.0 allows remote attackers to manipulate the idn parameter in teacher-issue-book.php, leading to unauthorized database access. An attacker can read, modify, or delete data, potentially compromising the entire application. Public exploit code is available, though active exploitation has not been confirmed.
SQL injection in code-projects Library System 1.0 allows remote attackers to manipulate the Username parameter in /add-student.php, potentially leading to unauthorized database access or modification. Exploit code is publicly available, but CISA KEV does not list it as actively exploited, and EPSS suggests a low 0.06% probability of exploitation.
SQL injection in code-projects Crime Reporting System 1.0 allows unauthenticated remote attackers to manipulate database queries via the email parameter of /policelogin.php, potentially leading to authentication bypass and sensitive data exposure. Exploit code is publicly available, but no active exploitation has been confirmed (not in CISA KEV). EPSS indicates very low risk of widespread exploitation (0.06%, 19th percentile).
SQL injection in the registration form of Code-projects Crime Reporting System 1.0 allows unauthenticated remote attackers to manipulate database queries by injecting SQL into the Name parameter. The exploit is publicly available but not currently listed in CISA KEV, and EPSS probability of exploitation remains low (0.06%). Although the vulnerability is trivial to exploit, the intrinsic impact is limited, affecting only the local database with low confidentiality, integrity, and availability repercussions.
SQL injection in code-projects Crime Reporting System 1.0 allows unauthenticated remote attackers to execute arbitrary SQL commands via the 'location' parameter of /complainer_page.php. A public exploit is available, though EPSS indicates extremely low likelihood of widespread exploitation and no active attacks are confirmed.
SQL injection in Crime Reporting System 1.0 allows remote unauthenticated attackers to manipulate database queries via the email parameter on the /userlogin.php page. The vulnerability has been publicly disclosed and exploit code is available, although the EPSS score is low (0.06%) and it is not listed in CISA's Known Exploited Vulnerabilities catalog.
SQL injection in Online Note Sharing 1.0 login page allows remote unauthenticated attackers to inject malicious SQL via username/password fields, potentially extracting or modifying database contents. A public proof-of-concept exploit exists, but EPSS indicates very low exploitation probability (0.06%).
SQL injection in PHPGurukul Online Notes Sharing System 1.0 allows remote attackers to execute arbitrary SQL commands via the sessionid cookie when accessing the /Dashboard endpoint. A publicly available proof-of-concept exploit exists, but no active exploitation has been confirmed by CISA KEV at this time. The vulnerability's impact is limited to low-confidentiality, low-integrity, and low-availability compromise of the database.
SQL injection in code-projects Library System 1.0 allows remote attackers to manipulate database queries via the ID parameter in /notapprove.php, potentially leading to unauthorized data access or modification. Exploit code is publicly available; no evidence of active exploitation but the low EPSS score suggests limited real-world impact.
Remote SQL injection in Jonnys Liquor 1.0 allows unauthenticated attackers to manipulate the drink parameter of the admin-area.php endpoint, potentially extracting or modifying database contents. Public exploit code is available, but EPSS indicates a low probability of exploitation (0.05%).
SQL injection in code-projects Jonnys Liquor 1.0 allows remote attackers to manipulate database content via the ID parameter in /admin/delete-row.php. The exploit is publicly available and requires no authentication, enabling malicious database actions. No active exploitation has been confirmed, and EPSS indicates very low exploitation probability.
SQL injection in Jonnys Liquor 1.0 allows unauthenticated remote attackers to manipulate database queries via the Search parameter of /browse.php. Exploit code is publicly available; however, the impact is assessed as low (only partial data exposure or modification). No evidence of active exploitation has been identified.
SQL injection in itsourcecode Agri-Trading Online Shopping System 1.0 allows remote, unauthenticated attackers to execute arbitrary SQL commands via the 'supplier' parameter in /admin/suppliercontroller.php. Exploit code is publicly available, but no evidence of active exploitation. The vulnerability carries a CVSS 4.0 base score of 5.5 (Medium) with limited impact on confidentiality, integrity, and availability.
SQL injection in Code-projects Student Enrollment System 1.0 allows unauthenticated remote attackers to inject SQL via the Username parameter in login.php, potentially leading to data theft or authentication bypass. Publicly available exploit code exists, but no active exploitation has been confirmed by CISA KEV. The EPSS score is very low, suggesting limited real-world exploitation likelihood.
Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Users can circumvent 2FA login for users due to a lack of server side validation for the same. This vulnerability is fixed in commit ddb439f8eb1816010f2ef653a908648b71f9bba8.
SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an attacker could modify the critical files by tampering with signed archives without breaking the signature, but it has a low impact on the confidentiality and availability of the system.
SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in potential privilege escalation. This has high impact on integrity, but low impact on confidentiality and availability of the system.
A security vulnerability in Missing synchronization in Windows Hyper-V (CVSS 6.8) that allows an authorized attacker. Remediation should follow standard vulnerability management procedures.
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to access sensitive information or bypass security measures. Exploitation of this issue does not require user interaction and scope is changed.
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
A security vulnerability in Acceptance of extraneous untrusted data with trusted data in Windows BitLocker (CVSS 6.8) that allows an unauthorized attacker. Remediation should follow standard vulnerability management procedures.
A privilege escalation vulnerability (CVSS 6.7) that allows an authorized attacker. Remediation should follow standard vulnerability management procedures.
A privilege escalation vulnerability (CVSS 6.7) that allows an authorized attacker. Remediation should follow standard vulnerability management procedures.
A security vulnerability in Ivanti Connect Secure (CVSS 6.6) that allows a remote authenticated attacker with admin rights. Remediation should follow standard vulnerability management procedures.
Memory corruption while processing camera TPG write request.
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0). The affected application allows to control the device by storing arbitrary files in the SFTP folder of the device. This could allow an attacker to cause a denial of service condition.
An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file.
Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network.
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-7030 is a security vulnerability (CVSS 6.5). Remediation should follow standard vulnerability management procedures.
Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information.