Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-10041 State: PUBLISHED Published: 2023-01-13T19:33:06.465Z Last Updated: 2024-08-06T08:58:25.881Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Dovgalyuk Products: AIBattle Problem Types: CWE-89 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Dovgalyuk AIBattle. Affected is the function sendComments of the file site/procedures.php. The manipulation of the argument text leads to sql injection. The name of the patch is e3aa4d0900167641d41cbccf53909229f00381c9. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218304. NOTE: This vulnerability
mmended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218304. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218304 - https://vuldb.com/?ctiid.218304 - https://github.com/Dovgalyuk/AIBattle-disabled-/commit/e3aa4d0900167641d41cbccf53909229f00381c9
CVE ID: CVE-2015-10042 State: PUBLISHED Published: 2023-01-13T20:16:34.602Z Last Updated: 2024-11-25T17:02:31.848Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Dovgalyuk Products: AIBattle Problem Types: CWE-89 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/procedures.php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is 448e9880aac18ae7832f8d065e03e46ce0f1d3e3. It is recommended to apply a patch to fix this issue. The identifier VDB-218305 was assigned to this v
5e03e46ce0f1d3e3. It is recommended to apply a patch to fix this issue. The identifier VDB-218305 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218305 - https://vuldb.com/?ctiid.218305 - https://github.com/Dovgalyuk/AIBattle-disabled-/commit/448e9880aac18ae7832f8d065e03e46ce0f1d3e3
CVE ID: CVE-2015-10043 State: PUBLISHED Published: 2023-01-14T20:58:03.296Z Last Updated: 2024-08-06T08:58:26.232Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: abreen Products: Apollo Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipulation of the argument file leads to path traversal. The patch is named 6206406630780bbd074aff34f4683fb764faba71. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218307. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http
nerability is VDB-218307. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.218307 - https://vuldb.com/?ctiid.218307 - https://github.com/abreen/Apollo/commit/6206406630780bbd074aff34f4683fb764faba71
CVE ID: CVE-2015-10044 State: PUBLISHED Published: 2023-01-15T09:20:58.171Z Last Updated: 2024-08-06T08:58:25.659Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: gophergala Products: sqldump Problem Types: CWE-89 Description: A vulnerability classified as critical was found in gophergala sqldump. This vulnerability affects unknown code. The manipulation leads to sql injection. The patch is identified as 76db54e9073b5248b8863e71a63d66a32d567d21. It is recommended to apply a patch to fix this issue. VDB-218350 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218350 - https
his vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218350 - https://vuldb.com/?ctiid.218350 - https://github.com/gophergala/sqldump/commit/76db54e9073b5248b8863e71a63d66a32d567d21
CVE ID: CVE-2015-10045 State: PUBLISHED Published: 2023-01-15T09:20:59.091Z Last Updated: 2025-04-08T18:13:45.868Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: tutrantta Products: project_todolist Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in tutrantta project_todolist. Affected is the function getAffectedRows/where/insert/update in the library library/Database.php. The manipulation leads to sql injection. The name of the patch is 194a0411bbe11aa4813f13c66b9e8ea403539141. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218352. Additional Analyst Notes: -
nded to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218352. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218352 - https://vuldb.com/?ctiid.218352 - https://github.com/tutrantta/project_todolist/commit/194a0411bbe11aa4813f13c66b9e8ea403539141
CVE ID: CVE-2015-10046 State: PUBLISHED Published: 2023-01-15T09:21:00.092Z Last Updated: 2024-08-06T08:58:25.562Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: lolfeedback Problem Types: CWE-89 Description: A vulnerability has been found in lolfeedback and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The identifier of the patch is 6cf0b5f2228cd8765f734badd37910051000f2b2. It is recommended to apply a patch to fix this issue. The identifier VDB-218353 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb
18353 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218353 - https://vuldb.com/?ctiid.218353 - https://github.com/philipblaquiere/lolfeedback/commit/6cf0b5f2228cd8765f734badd37910051000f2b2
CVE ID: CVE-2015-10047 State: PUBLISHED Published: 2023-01-15T09:58:03.158Z Last Updated: 2024-08-06T08:58:25.568Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: KYUUBl Products: school-register Problem Types: CWE-89 Description: A vulnerability was found in KYUUBl school-register. It has been classified as critical. This affects an unknown part of the file src/DBManager.java. The manipulation leads to sql injection. The patch is named 1cf7e01b878aee923f2b22cc2535c71a680e4c30. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218355. Additional Analyst Notes: - CVE Program Container: References: - h
iated identifier of this vulnerability is VDB-218355. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218355 - https://vuldb.com/?ctiid.218355 - https://github.com/KYUUBl/school-register/commit/1cf7e01b878aee923f2b22cc2535c71a680e4c30
CVE ID: CVE-2015-10048 State: PUBLISHED Published: 2023-01-15T09:58:04.085Z Last Updated: 2024-11-25T16:57:31.028Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: bmattoso Products: desafio_buzz_woody Problem Types: CWE-89 Description: A vulnerability was found in bmattoso desafio_buzz_woody. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identifier of the patch is cb8220cbae06082c969b1776fcb2fdafb3a1006b. It is recommended to apply a patch to fix this issue. The identifier VDB-218357 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
ifier VDB-218357 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218357 - https://vuldb.com/?ctiid.218357 - https://github.com/bmattoso/desafio_buzz_woody/commit/cb8220cbae06082c969b1776fcb2fdafb3a1006b
CVE ID: CVE-2015-10049 State: PUBLISHED Published: 2023-01-15T17:58:06.094Z Last Updated: 2024-08-06T08:58:26.521Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Overdrive Eletrônica Products: course-builder Problem Types: CWE-79 Description: A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some unknown functionality of the file coursebuilder/modules/oeditor/oeditor.html. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.8.0 is able to address this issue. The name of the patch is e39645fd714adb7e549908780235911ae282b21b. It is recommended
8.0 is able to address this issue. The name of the patch is e39645fd714adb7e549908780235911ae282b21b. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218372. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218372 - https://vuldb.com/?ctiid.218372 - https://github.com/overdrive-diy/course-builder/commit/e39645fd714adb7e549908780235911ae282b21b - https://github.com/overdrive-diy/course-builder/releases/tag/V1.8.0
CVE ID: CVE-2015-10050 State: PUBLISHED Published: 2023-01-15T17:58:07.219Z Last Updated: 2024-08-06T08:58:26.567Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: brandonfire Products: miRNA_Database_by_PHP_MySql Problem Types: CWE-89 Description: A vulnerability was found in brandonfire miRNA_Database_by_PHP_MySql. It has been declared as critical. This vulnerability affects the function __construct/select_single_rna/count_rna of the file inc/model.php. The manipulation leads to sql injection. The patch is identified as 307c5d510841e6142ddcbbdbb93d0e8a0dc3fd6a. It is recommended to apply a patch to fix this issue. VDB-218374 is the identifier assigned to th
cbbdbb93d0e8a0dc3fd6a. It is recommended to apply a patch to fix this issue. VDB-218374 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218374 - https://vuldb.com/?ctiid.218374 - https://github.com/brandonfire/miRNA_Database_by_PHP_MySql/commit/307c5d510841e6142ddcbbdbb93d0e8a0dc3fd6a
CVE ID: CVE-2015-10051 State: PUBLISHED Published: 2023-01-15T17:58:08.969Z Last Updated: 2025-04-08T18:14:40.378Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: bony2023 Products: Discussion-Board Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function display_all_replies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as 26439bc4c63632d63ba89ebc0f149b25a9010361. It is recommended to apply a patch to fix this issue. VDB-218378 is the identifier assigned to this vulnerability.
361. It is recommended to apply a patch to fix this issue. VDB-218378 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218378 - https://vuldb.com/?ctiid.218378 - https://github.com/bony2023/Discussion-Board/commit/26439bc4c63632d63ba89ebc0f149b25a9010361
CVE ID: CVE-2015-10052 State: PUBLISHED Published: 2023-01-15T18:58:03.486Z Last Updated: 2024-08-06T08:58:26.400Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: calesanz Products: gibb-modul-151 Problem Types: CWE-601 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in calesanz gibb-modul-151. This affects the function bearbeiten/login. The manipulation leads to open redirect. It is possible to initiate the attack remotely. The patch is named 88a517dc19443081210c804b655e72770727540d. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218379. NOTE: This vulnerab
d to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218379. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218379 - https://vuldb.com/?ctiid.218379 - https://github.com/calesanz/gibb-modul-151/commit/88a517dc19443081210c804b655e72770727540d
CVE ID: CVE-2015-10053 State: PUBLISHED Published: 2023-01-16T11:58:03.167Z Last Updated: 2024-08-06T08:58:26.523Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: prodigasistemas Products: curupira Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in prodigasistemas curupira up to 0.1.3. Affected is an unknown function of the file app/controllers/curupira/passwords_controller.rb. The manipulation leads to sql injection. Upgrading to version 0.1.4 is able to address this issue. The patch is identified as 93a9a77896bb66c949acb8e64bceafc74bc8c271. It is recommended to upgrade the affected component. VDB-218394 is the ident
s 93a9a77896bb66c949acb8e64bceafc74bc8c271. It is recommended to upgrade the affected component. VDB-218394 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218394 - https://vuldb.com/?ctiid.218394 - https://github.com/prodigasistemas/curupira/commit/93a9a77896bb66c949acb8e64bceafc74bc8c271 - https://github.com/prodigasistemas/curupira/releases/tag/v0.1.4
CVE ID: CVE-2015-10054 State: PUBLISHED Published: 2023-01-16T17:58:04.388Z Last Updated: 2024-08-06T08:58:26.298Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: githuis Products: P2Manage Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in githuis P2Manage. This affects the function Execute of the file PTwoManage/Database.cs. The manipulation of the argument sql leads to sql injection. The identifier of the patch is 717380aba80002414f82d93c770035198b7858cc. It is recommended to apply a patch to fix this issue. The identifier VDB-218397 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program
to fix this issue. The identifier VDB-218397 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218397 - https://vuldb.com/?ctiid.218397 - https://github.com/githuis/P2Manage/commit/717380aba80002414f82d93c770035198b7858cc
CVE ID: CVE-2015-10055 State: PUBLISHED Published: 2023-01-16T17:58:05.323Z Last Updated: 2024-08-06T08:58:25.303Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: PictureThisWebServer Problem Types: CWE-89 Description: A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes/user.js. The manipulation of the argument username/password leads to sql injection. The patch is named 68b9dc346e88b494df00d88c7d058e96820e1479. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218399. Additional Analyst Notes: - CV
a patch to fix this issue. The associated identifier of this vulnerability is VDB-218399. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218399 - https://vuldb.com/?ctiid.218399 - https://github.com/jan-rodriguez/PictureThisWebServer/pull/1 - https://github.com/jan-rodriguez/PictureThisWebServer/commit/68b9dc346e88b494df00d88c7d058e96820e1479
CVE ID: CVE-2015-10056 State: PUBLISHED Published: 2023-01-16T18:58:04.590Z Last Updated: 2025-04-07T16:47:48.899Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: 2071174A Products: vinylmap Problem Types: CWE-89 Description: A vulnerability was found in 2071174A vinylmap. It has been classified as critical. Affected is the function contact of the file recordstoreapp/views.py. The manipulation leads to sql injection. The name of the patch is b07b79a1e92cc62574ba0492cce000ef4a7bd25f. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218400. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
identifier of this vulnerability is VDB-218400. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218400 - https://vuldb.com/?ctiid.218400 - https://github.com/2071174A/vinylmap/commit/b07b79a1e92cc62574ba0492cce000ef4a7bd25f
CVE ID: CVE-2015-10057 State: PUBLISHED Published: 2023-01-16T18:58:06.913Z Last Updated: 2024-08-06T08:58:26.421Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Little Apps Products: Little Software Stats Problem Types: CWE-284 Description: A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file inc/class.securelogin.php of the component Password Reset Handler. The manipulation leads to improper access controls. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 0.2 is able to address this
of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 0.2 is able to address this issue. The identifier of the patch is 07ba8273a9311d1383f3686ac7cb32f20770ab1e. It is recommended to upgrade the affected component. The identifier VDB-218401 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.218401 - https://vuldb.com/?ctiid.218401 - https://github.com/little-apps/little-software-stats/commit/07ba8273a9311d1383f3686ac7cb32f20770ab1e - https://github.com/little-apps/little-software-stats/releases/tag/v0.2
CVE ID: CVE-2015-10058 State: PUBLISHED Published: 2023-01-17T12:58:02.894Z Last Updated: 2024-08-06T08:58:26.353Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Wikisource Products: Category Browser Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file index.php. The manipulation of the argument lang leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named 764f4e8ce3f9242637df77530c70ae8a2ec4b6a1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218415. Additional
ecommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218415. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218415 - https://vuldb.com/?ctiid.218415 - https://github.com/wikisource/ws-cat-browser/commit/764f4e8ce3f9242637df77530c70ae8a2ec4b6a1
CVE ID: CVE-2015-10059 State: PUBLISHED Published: 2023-01-17T12:58:03.993Z Last Updated: 2024-08-06T08:58:26.433Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: s134328 Products: Webapplication-Veganguide Problem Types: CWE-79 Description: A vulnerability has been found in s134328 Webapplication-Veganguide and classified as problematic. This vulnerability affects unknown code of the file p05-integration/app/shared/api/apiService.js. The manipulation of the argument country/city leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 2aa760fa4e779e40a28206a32ac22ac10356f519. It is recommended to apply a patch to fix this issue. The identifier
patch is 2aa760fa4e779e40a28206a32ac22ac10356f519. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218416. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.218416 - https://vuldb.com/?ctiid.218416 - https://github.com/s134328/Webapplication-Veganguide/commit/2aa760fa4e779e40a28206a32ac22ac10356f519
CVE ID: CVE-2015-10060 State: PUBLISHED Published: 2023-01-17T12:58:04.928Z Last Updated: 2024-08-06T08:58:26.415Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: MNBikeways Products: database Problem Types: CWE-89 Description: A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing of the file Data/views.py. The manipulation of the argument id1/id2 leads to sql injection. The identifier of the patch is 829a027aca7c17f5a7ec1addca8dd5d5542f86ac. It is recommended to apply a patch to fix this issue. The identifier VDB-218417 was assigned to this vulnerability. Additional Analyst Notes: - CVE Progr
h to fix this issue. The identifier VDB-218417 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218417 - https://vuldb.com/?ctiid.218417 - https://github.com/MNBikeways/database/commit/829a027aca7c17f5a7ec1addca8dd5d5542f86ac
CVE ID: CVE-2015-10061 State: PUBLISHED Published: 2023-01-17T14:58:04.094Z Last Updated: 2024-08-06T08:58:26.408Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: evandro-machado Products: Trabalho-Web2 Problem Types: CWE-89 Description: A vulnerability was found in evandro-machado Trabalho-Web2. It has been classified as critical. This affects an unknown part of the file src/java/br/com/magazine/dao/ClienteDAO.java. The manipulation leads to sql injection. The patch is named f59ac954625d0a4f6d34f069a2e26686a7a20aeb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218427. Additional Analyst Notes:
ply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218427. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218427 - https://vuldb.com/?ctiid.218427 - https://github.com/evandro-machado/Trabalho-Web2/commit/f59ac954625d0a4f6d34f069a2e26686a7a20aeb
CVE ID: CVE-2015-10062 State: PUBLISHED Published: 2023-01-17T18:58:03.554Z Last Updated: 2024-08-06T08:58:26.346Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: galaxy-data-resource Problem Types: CWE-74 Description: A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Line Template. The manipulation leads to injection. Upgrading to version 14.10.1 is able to address this issue. The patch is named 50d65f45d3f5be5d1fbff2e45ac5cec075f07d42. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is
ac5cec075f07d42. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-218451. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218451 - https://vuldb.com/?ctiid.218451 - https://github.com/blankenberg/galaxy-data-resource/commit/50d65f45d3f5be5d1fbff2e45ac5cec075f07d42 - https://github.com/blankenberg/galaxy-data-resource/releases/tag/v14.10.1
CVE ID: CVE-2015-10063 State: PUBLISHED Published: 2023-01-17T18:58:04.511Z Last Updated: 2024-11-25T16:34:17.227Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: saemorris Products: TheRadSystem Problem Types: CWE-89 Description: A vulnerability was found in saemorris TheRadSystem and classified as critical. This issue affects the function redirect of the file _login.php. The manipulation of the argument user/pass leads to sql injection. The attack may be initiated remotely. The identifier of the patch is bfba26bd34af31648a11af35a0bb66f1948752a6. It is recommended to apply a patch to fix this issue. The identifier VDB-218453 was assigned to this vulnerability. Additional Analys