Total
398446 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-25239 | 1 Walterjnr1 | 1 Employee Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POST request to /emloyee_akpoly/Account/login.php. | |||||
| CVE-2024-25228 | 1 Vinchin | 1 Vinchin Backup And Recovery | 2026-06-17 | N/A | 8.8 HIGH |
| Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php. | |||||
| CVE-2024-25227 | 1 Abocms | 1 Abo.cms | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges, and obtain sensitive information via the tb_login parameter in admin login page. | |||||
| CVE-2024-25226 | 1 Code-projects | 1 Simple Admin Panel | 2026-06-17 | N/A | 6.1 MEDIUM |
| A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function. | |||||
| CVE-2024-25225 | 1 Code-projects | 1 Simple Admin Panel | 2026-06-17 | N/A | 5.4 MEDIUM |
| A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function. | |||||
| CVE-2024-25224 | 1 Code-projects | 1 Simple Admin Panel | 2026-06-17 | N/A | 5.4 MEDIUM |
| A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Size Number parameter under the Add Size function. | |||||
| CVE-2024-25223 | 1 Code-projects | 1 Simple Admin Panel | 2026-06-17 | N/A | 9.8 CRITICAL |
| Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php. | |||||
| CVE-2024-25222 | 1 Code-projects | 1 Task Manager | 2026-06-17 | N/A | 9.8 CRITICAL |
| Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php. | |||||
| CVE-2024-25221 | 1 Code-projects | 1 Task Manager | 2026-06-17 | N/A | 6.1 MEDIUM |
| A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php. | |||||
| CVE-2024-25220 | 1 Code-projects | 1 Task Manager | 2026-06-17 | N/A | 9.8 CRITICAL |
| Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php. | |||||
| CVE-2024-25219 | 1 Code-projects | 1 Task Manager | 2026-06-17 | N/A | 6.1 MEDIUM |
| A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Task Name parameter /TaskManager/Task.php. | |||||
| CVE-2024-25218 | 1 Code-projects | 1 Task Manager | 2026-06-17 | N/A | 6.1 MEDIUM |
| A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Project Name parameter /TaskManager/Projects.php. | |||||
| CVE-2024-25217 | 1 Oretnom23 | 1 Online Medicine Ordering System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/view_product. | |||||
| CVE-2024-25216 | 1 Sherlock | 1 Employee Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php. | |||||
| CVE-2024-25215 | 1 Sherlock | 1 Employee Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php. | |||||
| CVE-2024-25214 | 1 Sherlock | 1 Employee Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html. | |||||
| CVE-2024-25213 | 1 Sherlock | 1 Employee Management System | 2026-06-17 | N/A | 7.2 HIGH |
| Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php. | |||||
| CVE-2024-25212 | 1 Sherlock | 1 Employee Management System | 2026-06-17 | N/A | 7.2 HIGH |
| Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php. | |||||
| CVE-2024-25211 | 1 Rems | 1 Simple Expense Tracker App | 2026-06-17 | N/A | 9.8 CRITICAL |
| Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpoint/delete_category.php. | |||||
| CVE-2024-25210 | 1 Rems | 1 Simple Expense Tracker App | 2026-06-17 | N/A | 9.8 CRITICAL |
| Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/delete_expense.php. | |||||