CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 16/05/2024 |
| CVE-2024-4974 | 中6.1 | A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an unknown function of the file /register.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the pub | 16/05/2024 |
| CVE-2024-4973 | 緊急9.8 | A vulnerability classified as critical was found in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument name/number/address leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and | 16/05/2024 |
| CVE-2024-4972 | 緊急9.8 | A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may | 16/05/2024 |
| CVE-2024-34955 | 緊急9.8 | Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter. | 15/05/2024 |
| CVE-2024-34954 | 中6.1 | Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting (XSS) via the budget parameter. | 15/05/2024 |
| CVE-2024-31610 | 中6.3 | File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file. | 25/04/2024 |
| CVE-2023-41505 | 緊急9.8 | An arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. | 13/03/2024 |
| CVE-2023-41504 | 高8.8 | SQL Injection vulnerability in Student Enrollment In PHP 1.0 allows attackers to run arbitrary code via the Student Search function. | 13/03/2024 |
| CVE-2024-24101 | 緊急9.8 | Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update. | 12/03/2024 |
| CVE-2024-24097 | 中5.4 | Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed. | 12/03/2024 |
| CVE-2024-24093 | 緊急9.8 | SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information. | 12/03/2024 |
| CVE-2024-24092 | 高7.8 | SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php. | 12/03/2024 |
| CVE-2023-42308 | 中6.1 | Cross Site Scripting (XSS) vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section. | 12/03/2024 |
| CVE-2023-42307 | 中6.1 | Cross Site Scripting (XSS) vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section. | 12/03/2024 |
| CVE-2023-41503 | 緊急9.8 | Student Enrollment In PHP v1.0 was discovered to contain a SQL injection vulnerability via the Login function. | 07/03/2024 |
| CVE-2023-41015 | 中5.5 | code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via /Employer/DeleteJob.php?JobId=1. | 07/03/2024 |
| CVE-2023-41014 | 緊急9.8 | code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer." | 07/03/2024 |