2024

itsourcecode Alton Management System 1.0 is vulnerable to SQL Injection in /noncombo_save.php via the "menu" parameter.

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of t

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of t

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of t

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /j

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobport

SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /job

SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobport

SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /j

SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jo

SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /j

File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an auth

A vulnerability was found in Windmill 1.380.0. It has been classified as problematic. Affected is an unknown function of

A vulnerability, which was classified as problematic, was found in D-Link DNS-320 2.02b01. This affects an unknown part

When a canister method is called via ic_cdk::call* , a new Future CallFuture is created and can be awaited by the calle

A vulnerability, which was classified as problematic, has been found in D-Link DNS-320 2.02b01. Affected by this issue i

The HelloAsso plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing authorization a

The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability c

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the

The Security, Antivirus, Firewall – S.A.F plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, a

The Cab fare calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vehicle title setting

The Dynamic Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘dfiFeatured’ param

The RD Station plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5

The Booking for Appointments and Events Calendar – Amelia Premium and Lite plugins for WordPress are vulnerable to unaut

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STI Buttons shor

The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to unauthorized access of data and modifi

Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After F

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an una

The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it

The function ctl_write_buffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished p

The ctl_request_sense function could expose up to three bytes of the kernel heap to userspace. Malicious software runni

Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM

The ctl_report_supported_opcodes function did not sufficiently validate a field provided by userspace, allowing an arbit

An insufficient boundary validation in the USB code could lead to an out-of-bounds write on the heap, with data controll

A missing null-termination character in the last element of an nvlist array string can lead to writing outside the alloc

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a s

Malicious software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bh

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'check

Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.

Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Field

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email S

A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2

A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x

sigstore-go, a Go library for Sigstore signing and verification, is susceptible to a denial of service attack in version

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In Indi

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to missing protection mechanism

In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting to