2024

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploite

SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability.

Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously c

A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a J

Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciou

Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciou

Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciou

Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a malicious

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the

An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the

An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one

An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the

Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrec

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub all

An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of

An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of

Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager has been discovered in Open

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact al

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact al

Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000.

Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™

Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before

A vulnerability identified in OpenText™ Identity Manager AzureAD Driver that allows logging of sensitive information in

Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered i

Cross-site Scripting (XSS) vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve sess

SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially craf

The amCharts: Charts and Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'amcharts_jav

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter o

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parame

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in TE Informatics V5 allows

The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER['REQUEST_URI'] parameter before outputt

The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation

The blogintroduction-wordpress-plugin WordPress plugin through 0.3.0 does not have CSRF check in place when updating its

The Misiek Paypal WordPress plugin through 1.1.20090324 does not have CSRF check in some places, and is missing sanitisa

The Simple Headline Rotator WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitis

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could

The Quick Code WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well

The ILC Thickbox WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could

The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF check in some places, and is missing sanitisati

The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF checks in some places, which could allow attack

The Gixaw Chat WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well

The Adicon Server WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL stateme

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.16 does not sanitise and escape some of its Give

The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could

The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before outp

The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places, and is missing sanitisat

The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which cou

The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which