Vulnerabilities
Summary — last 7 days
New vulnerabilities4,673▼ 677 vs. last week
Critical / high1,759▼ 1,286 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)973▲ 874 vs. last week
More filters
14 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 0.90% | — | EMS Project EMS | 9/6/2022 | 6/17/2026 | SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage. | |
| Modified | High (7.5) | 1.7% | — | White Shark Systems Project White Shark Systems | 6/21/2021 | 6/17/2026 | White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the default_task_edituser.php files failing to filter the csa_to_user parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information. | |
| Modified | High (7.5) | 1.7% | — | White Shark Systems Project White Shark Systems | 6/21/2021 | 6/17/2026 | White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information. | |
| Modified | Medium (5.3) | 1.5% | — | White Shark Systems Project White Shark Systems | 6/21/2021 | 6/17/2026 | White Shark System (WSS) 1.3.2 has a sensitive information disclosure vulnerability. The if_get_addbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site. | |
| Modified | High (8.8) | 2.4% | — | White Shark Systems Project White Shark Systems | 6/21/2021 | 6/17/2026 | White Shark System (WSS) 1.3.2 has an unauthorized access vulnerability in default_user_edit.php, remote attackers can exploit this vulnerability to escalate to admin privileges. | |
| Modified | Medium (5.3) | 0.90% | — | White Shark Systems Project White Shark Systems | 6/21/2021 | 6/17/2026 | White Shark System (WSS) 1.3.2 has web site physical path leakage vulnerability. | |
| Modified | High (7.5) | 1.7% | — | White Shark Systems Project White Shark Systems | 6/21/2021 | 6/17/2026 | White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the log_edit.php files failing to filter the csa_to_user parameter, remote attackers can exploit the vulnerability to obtain database sensitive information. | |
| Modified | Medium (6.5) | 0.50% | — | White Shark Systems Project White Shark Systems | 6/21/2021 | 6/17/2026 | White Shark System (WSS) 1.3.2 is vulnerable to CSRF. Attackers can use the user_edit_password.php file to modify the user password. | |
| Modified | Medium (6.5) | 1.2% | — | White Shark Systems Project White Shark Systems | 6/21/2021 | 6/17/2026 | White Shark System (WSS) 1.3.2 is vulnerable to sensitive information disclosure via default_task_add.php, remote attackers can exploit the vulnerability to create a task. | |
| Modified | Critical (9.8) | 1.8% | — | White Shark Systems Project White Shark Systems | 6/21/2021 | 6/17/2026 | White Shark System (WSS) 1.3.2 is vulnerable to unauthorized access via user_edit_password.php, remote attackers can modify the password of any user. | |
| Modified | Critical (9.8) | 2.6% | — | QQQ Systems Project QQQ Systems | 3/22/2018 | 6/17/2026 | QQQ SYSTEMS version 2.24 allows an attacker to execute arbitrary commands via unspecified vectors. | |
| Modified | Medium (6.1) | 0.71% | — | QQQ Systems Project QQQ Systems | 3/22/2018 | 6/17/2026 | Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. | |
| Modified | Medium (6.1) | 0.71% | — | QQQ Systems Project QQQ Systems | 3/22/2018 | 6/17/2026 | Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz_op.cgi. | |
| Modified | Medium (6.1) | 0.71% | — | QQQ Systems Project QQQ Systems | 3/22/2018 | 6/17/2026 | Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi. |