2024

A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 all

A SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allows

A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management System

Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to sensit

TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function

Improper fingerprint validation in the TeamViewer Client (Full & Host) prior Version 15.54 for Windows and macOS allows

A vulnerability classified as problematic was found in SourceCodester Simple Online Bidding System 1.0. Affected by this

Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .ms

Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .ms

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to ca

IBM Engineering Workflow Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. Under certain configur

IBM Aspera Faspex 5.0.0 through 5.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects

Path traversal vulnerability in MosP kintai kanri V4.6.6 and earlier allows a remote attacker who can log in to the prod

In Avocent DSR2030 Appliance firmware 03.04.00.07 before 03.07.01.23, and SVIP1020 Appliance firmware 01.06.00.03 before

Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructur

Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructur

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive

Minder by Stacklok is an open source software supply chain security platform. Minder prior to version 0.0.51 is vulnerab

Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP inpu

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.10.0, opening an ebook with malicious s

ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. Prior to version 1.3.10, there is a ve

A vulnerability, which was classified as critical, has been found in bwoodsend rockhopper up to 0.1.2. Affected by this

Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability involving insecu

A vulnerability had been discovered in WinNMP 19.02 consisting of an XSS attack via index page in from, subject, text an

A vulnerability had been discovered in WinNMP 19.02 consisting of an XSS attack via /tools/redis.php page in the k, hash

An issue was discovered in Logpoint SAML Authentication before 6.0.3. An attacker can place a crafted filename in the st

The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF check in some places, and is missing saniti

The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not sanitize and escape a parameter before using it in a

The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers t

The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers t

The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers t

The Ditty WordPress plugin before 3.1.36 does not sanitise and escape some of its settings, which could allow high priv

In Eclipse OpenJ9 release versions prior to 0.44.0 and after 0.13.0, when running with JVM option -Xgc:concurrentScaveng

Cross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5. If this vulnerability is exploited, an

Cross-site scripting vulnerability exists in Splunk Config Explorer versions prior to 1.7.16. If this vulnerability is e

Pointsharp Cryptshare Server before 7.0.0 has an XSS issue that is related to notification messages.

A vulnerability classified as critical was found in itsourcecode Online Student Enrollment System 1.0. Affected by this

A vulnerability classified as critical has been found in itsourcecode Online Student Enrollment System 1.0. Affected is

A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been rated as critical. This issu

A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been declared as critical. This v

A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been classified as critical. This

A vulnerability was found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by t

A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected

A vulnerability, which was classified as critical, was found in itsourcecode Online Student Enrollment System 1.0. Affec

A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by

Mintplex-Labs' anything-llm application is vulnerable to improper neutralization of special elements used in an expressi

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory