2024

In lunary-ai/lunary versions up to and including 1.2.5, an information disclosure vulnerability exists due to the inclus

In lunary-ai/lunary versions 1.2.2 through 1.2.6, an incorrect authorization vulnerability allows unprivileged users to

An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This

A memory corruption vulnerability exists in the affected products when parsing DFT files. Local threat actors can explo

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management Sy

A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0

A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname

A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the user

A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 v

A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document con

matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. The provisioning API of the matrix-apps

common-user-management is a robust Spring Boot application featuring user management services designed to control user a

HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update dat

A vulnerability has been found in SourceCodester Best Employee Management System 1.0 and classified as critical. This vu

A vulnerability, which was classified as critical, was found in SourceCodester Best Employee Management System 1.0. This

The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing speciall

Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'fil

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/admin_user.php in KASHIPARA E-learning Management

A vulnerability, which was classified as critical, has been found in SourceCodester Best Employee Management System 1.0.

A vulnerability classified as critical has been found in EyouCMS up to 1.6.7. Affected is an unknown function of the com

A vulnerability was found in EyouCMS 1.51. It has been rated as critical. This issue affects the function editFile of th

A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the userna

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.3 before 17.4.2, all versions start

A Directory listing issue was found in PHPGurukul User Registration & Login and User Management System 3.2, which allows

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/school_year.php in KASHIPARA E-learning Management

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Man

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management Syste

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management

Absolute path traversal (incorrect restriction of a path to a restricted directory) vulnerability in the EasyPHP web ser

A vulnerability was found in Apereo CAS 6.6. It has been classified as critical. This affects an unknown part of the fil

A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functi

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to PHP Object Injection in all versions up t

An issue has been discovered in GitLab CE/EE affecting all versions from 16 before 17.3.7, 17.4 before 17.4.4, and 17.5

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 pr

A vulnerability has been found in Apereo CAS 6.6 and classified as problematic. Affected by this vulnerability is an unk

Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitiv

Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows

Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnis

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows fro

A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input call

IBM Security SOAR 51.0.1.0 and earlier contains a mechanism for users to recover or change their passwords without knowi

IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arb

IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arb

A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_co

A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack o

Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution

Harbor fails to validate the user permissions when updating tag retention policies.  By sending a request to update a t

Harbor fails to validate the user permissions when updating tag immutability policies.  By sending a request to update