2024

A SQL injection vulnerability in "/music/ajax.php?action=find_music" in Kashipara Music Management System v1.0 allows an

A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management Sys

squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the com

Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affect

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Produc

The Woo Inquiry plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 0.1 due to ins

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix CT entry update leaks of modify head

An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication wi

An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated atta

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.

The pagination class includes arbitrary parameters in links, leading to cache poisoning attack vectors.

MEGABOT is a fully customized Discord bot for learning and fun. The `/math` command and functionality of MEGABOT version

A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or

An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday f

Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code executio

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport paramet

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password paramete

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/co

An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a c

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number

An issue in the login component (process_login.php) of Hotel Management System commit 79d688 allows attackers to authent

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type paramet

Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.2.

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it

The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form buil

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all

Deserialization of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through

Improper Privilege Management vulnerability in Geek Code Lab Login As Users allows Privilege Escalation.This issue affec

In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of length verification for the

In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for th

In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID fi

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Deserialization of Untrusted Data vulnerability in Crew HRM Crew HRM hr-management.This issue affects Crew HRM: from n/a

Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This iss

Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This issue affects JobSearch

Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue aff

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user without

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible

Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultim

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information v