Show filters
1,653 Total Results
Displaying 1-10 of 1,653
Sort by:
Attacker Value
Very High
CVE-2023-21716
Disclosure Date: February 14, 2023 (last updated May 29, 2024)
Microsoft Word Remote Code Execution Vulnerability
9
Attacker Value
High
CVE-2023-23399
Disclosure Date: March 14, 2023 (last updated January 11, 2025)
Microsoft Excel Remote Code Execution Vulnerability
4
Attacker Value
Very High
CVE-2021-40578
Disclosure Date: December 07, 2021 (last updated February 23, 2025)
Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter.
3
Attacker Value
Very High
CVE-2021-42668
Disclosure Date: November 05, 2021 (last updated February 23, 2025)
A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_classmates.php web page.. As a result, an attacker can extract sensitive data from the web server and in some cases can use this vulnerability in order to get a remote code execution on the remote web server.
3
Attacker Value
Very High
CVE-2021-41649
Disclosure Date: October 01, 2021 (last updated February 23, 2025)
An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php cat_id parameter. Using a post request does not sanitize the user input.
3
Attacker Value
Moderate
CVE-2023-23396
Disclosure Date: March 14, 2023 (last updated May 29, 2024)
Microsoft Excel Denial of Service Vulnerability
2
Attacker Value
Unknown
CVE-2022-29109
Disclosure Date: May 10, 2022 (last updated November 29, 2024)
Microsoft Excel Remote Code Execution Vulnerability
3
Attacker Value
Very High
CVE-2021-43420
Disclosure Date: January 24, 2022 (last updated February 23, 2025)
SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter.
2
Attacker Value
Very High
CVE-2021-44655
Disclosure Date: December 15, 2021 (last updated February 23, 2025)
Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to get admin access on the application.
2
Attacker Value
Very High
CVE-2021-42580
Disclosure Date: November 15, 2021 (last updated February 23, 2025)
Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file (/admin/login.php) and authenticated file upload in (Master.php) file , we can craft these two vunlerablities to get unauthenticated remote command execution.
2
