2024

A vulnerability classified as problematic was found in code-projects Online Shop Store 1.0. This vulnerability affects u

A vulnerability was found in SourceCodesters Clinics Patient Management System 2.0. It has been rated as critical. This

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been declared as critical. This vulnerability affects u

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been classified as problematic. This affects an unknown

A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some u

A vulnerability has been found in SourceCodester PHP CRUD 1.0 and classified as critical. Affected by this vulnerability

A vulnerability, which was classified as critical, was found in SourceCodester Simple Invoice Generator System 1.0. Affe

A vulnerability, which was classified as critical, has been found in SourceCodester Online Food Menu 1.0. This issue aff

A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remo

An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remot

An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.

A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection.

A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This atta

A server side request forgery vulnerability allows a low-privileged user to perform local privilege escalation through e

An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to

A vulnerability that allows a user who has been assigned a low-privileged role within Veeam Backup & Replication to alte

A path traversal vulnerability allows an attacker with a low-privileged account and local access to the system to perfor

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code exec

A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service

A missing authorization vulnerability allows a local low-privileged user on the machine to escalate their privileges to

An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system with

A code injection vulnerability that allows a low-privileged user with REST API access granted to remotely upload arbitra

A code injection vulnerability that permits a low-privileged user to upload arbitrary files to the server, leading to re

A code injection vulnerability can allow a low-privileged user to overwrite files on that VSPC server, which can lead to

An authentication bypass vulnerability can allow a low privileged attacker to access the NTLM hash of service account on

A vulnerability classified as problematic was found in SourceCodester Food Ordering Management System 1.0. This vulnerab

Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions

A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs

Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL whi

Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be

A vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental-permission flag using

A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This f

fs.openAsBlob() can bypass the experimental permission model when using the file system read restriction with the `--all

A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. This affect

A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically define

A vulnerability was found in SourceCodester Clinics Patient Management System 2.0 and classified as problematic. This is

IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper memory allocation cau

IBM Maximo Application Suite - Manage Component 8.10, 8.11, and 9.0 uses weaker than expected cryptographic algorithms t

The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valid

The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘s

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and incl

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded file (e

The Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is vulnerable to Full Path Disclosure in a

A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the function formatD

The Preloader Plus – WordPress Loading Screen Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index o

Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows an