2024

A vulnerability classified as critical was found in code-projects Blood Bank System 1.0. This vulnerability affects unkn

A vulnerability classified as critical has been found in SourceCodester Profile Registration without Reload Refresh 1.0.

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ElementsKit ElementsKit

A vulnerability was found in SourceCodester Modern Loan Management System 1.0. It has been classified as critical. Affec

A vulnerability has been found in SourceCodester Telecom Billing Management System 1.0 and classified as critical. This

A vulnerability classified as critical has been found in code-projects Restaurant Reservation System 1.0. Affected is an

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and IBM Cognos Analytics Re

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been rated as critical. Affected by this iss

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this

A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of t

A vulnerability was found in DedeCMS up to 5.7.115. It has been rated as critical. This issue affects some unknown proce

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings

This vulnerability occurs when an attacker exploits a race condition between the time a file is checked and the time it

The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling the

The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the conf

eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via upload_files.

eNMS up to 4.7.1 is vulnerable to Directory Traversal via /download/file.

eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via edit_file.

Confidant is a open source secret management service that provides user-friendly storage and access to secrets. The foll

A stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows at

The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen,

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools,

Cross Site Scripting vulnerability in Leotheme Leo Product Search Module v.2.1.6 and earlier allows a remote attacker to

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Thi

Improper input validation in /admin/config/save in User-friendly SVN (USVN) before v1.0.12 and below allows administrato

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerabili

A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some u

A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affec

A vulnerability, which was classified as critical, was found in code-projects Crud Operation System 1.0. Affected is an

A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affe

Zitadel is an open source identity management platform. In Zitadel, even after an organization is deactivated, associate

Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy will crash when the http async client is handl

Envoy is a cloud-native high-performance edge/middle/service proxy. Jwt filter will lead to an Envoy crash when clear ro

Envoy is a cloud-native high-performance edge/middle/service proxy. A vulnerability has been identified in Envoy that al

Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external cl

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affec

A vulnerability was found in jeanmarc77 123solar 1.8.4.5. It has been rated as critical. Affected by this issue is some

Puma is a Ruby/Rack web server built for parallelism. In affected versions clients could clobber values set by intermedi

A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function

A vulnerability was found in Jinan Chicheng Company JFlow 2.0.0. It has been rated as problematic. This issue affects th

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. This vulnerability affects the

Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP Host header injection.

In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page

In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible

In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a pro

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific