快速搜索提示：
按厂商查询（如：microsoft）|
按产品查询（如：microsoft sql_server）
漏洞列表 354145
| CVE ID | 标题 | 严重程度 | CVSS | 发布时间 | 受影响产品 | 数据源 | 操作 |
|---|---|---|---|---|---|---|---|
| CVE-2025-13284 |
ThinPLUS｜ThinPLUS - OS Command Injection
|
CRITICAL | 9.3 | 2025-11-17 |
ThinPLUS ThinPLUS
|
CVE NVD | |
| CVE-2025-13261 |
lsfusion platform DownloadFileRequestHandler.java DownloadFileRequestHandler path traversal
|
MEDIUM | 6.9 | 2025-11-17 |
lsfusion platform
lsfusion platform
+1个
|
CVE NVD | |
| CVE-2025-13283 |
Chunghwa Telecom｜TenderDocTransfer - Arbitrary File Copy and Paste
|
HIGH | 7.0 | 2025-11-17 |
Chunghwa Telecom TenderDocTransfer
cht tenderdoctransfer
|
CVE NVD | |
| CVE-2025-13282 |
Chunghwa Telecom｜TenderDocTransfer - Arbitrary File Delete
|
HIGH | 7.0 | 2025-11-17 |
Chunghwa Telecom TenderDocTransfer
cht tenderdoctransfer
|
CVE NVD | |
| CVE-2025-13260 |
Campcodes Supplier Management System edit_product.php sql injection
|
MEDIUM | 5.3 | 2025-11-17 |
Campcodes Supplier Management System
campcodes supplier_management_system
|
CVE NVD | |
| CVE-2025-10460 |
Unsanitized parameter input leading to SQL Injection vulnerability
|
CRITICAL | 9.4 | 2025-11-17 |
BEIMS Contractor Web
|
CVE NVD | |
| CVE-2025-13259 |
Campcodes Supplier Management System edit_unit.php sql injection
|
MEDIUM | 5.3 | 2025-11-17 |
Campcodes Supplier Management System
campcodes supplier_management_system
|
CVE NVD | |
| CVE-2025-13258 |
Tenda AC20 WifiExtraSet buffer overflow
|
HIGH | 8.7 | 2025-11-17 |
Tenda AC20
Tenda AC20
+12个
|
CVE NVD | |
| CVE-2025-13257 |
itsourcecode Inventory Management System index.php sql injection
|
MEDIUM | 6.9 | 2025-11-17 |
itsourcecode Inventory Management System
janobe inventory_management_system
|
CVE NVD | |
| CVE-2025-13256 |
projectworlds Advanced Library Management System borrow.php sql injection
|
MEDIUM | 5.3 | 2025-11-17 |
projectworlds Advanced Library Management System
projectworlds advanced_library_management_system
|
CVE NVD | |
| CVE-2025-13255 |
projectworlds Advanced Library Management System book_search.php sql injection
|
MEDIUM | 5.3 | 2025-11-17 |
projectworlds Advanced Library Management System
projectworlds advanced_library_management_system
|
CVE NVD | |
| CVE-2025-13254 |
projectworlds Advanced Library Management System add_member.php sql injection
|
MEDIUM | 5.3 | 2025-11-17 |
projectworlds Advanced Library Management System
projectworlds advanced_library_management_system
|
CVE NVD | |
| CVE-2024-44641 |
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password...
|
MEDIUM | 6.5 | 2025-11-17 |
phpgurukul small_crm
|
CVE NVD | |
| CVE-2024-44644 |
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in man...
|
MEDIUM | 6.5 | 2025-11-17 |
phpgurukul small_crm
|
CVE NVD | |
| CVE-2024-44647 |
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in ma...
|
MEDIUM | 6.1 | 2025-11-17 |
phpgurukul small_crm
|
CVE NVD | |
| CVE-2024-44648 |
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-d...
|
MEDIUM | 6.5 | 2025-11-17 |
phpgurukul small_crm
|
CVE NVD | |
| CVE-2024-44651 |
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email parameter in us...
|
MEDIUM | 6.5 | 2025-11-17 |
kashipara ecommerce_website
|
CVE NVD | |
| CVE-2024-44652 |
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_fi...
|
MEDIUM | 6.5 | 2025-11-17 |
kashipara ecommerce_website
|
CVE NVD | |
| CVE-2024-44653 |
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_...
|
MEDIUM | 6.5 | 2025-11-17 |
kashipara ecommerce_website
|
CVE NVD | |
| CVE-2024-44654 |
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno...
|
MEDIUM | 6.5 | 2025-11-17 |
phpgurukul complaint_management_system
|
CVE NVD |