2024

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type paramet

A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management System commit 91caab8 allo

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter

Servision - CWE-287: Improper Authentication

7Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Priority – CWE-552: Files or Directories Accessible to External Parties

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Ericsson Packet Core Controller (PCC) contains a vulnerability in Access and Mobility Management Function (AMF) where im

The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress

Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0p

This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689  was introduced in versions 9.1.0, 9.2.0, 9.

Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.2.

In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a speci

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it

The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'course_carouse

cron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based buffer underflow and memo

The WP Last Modified Info plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘template’ attribute

The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form buil

The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form buil

The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form buil

The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form buil

The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form buil

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre

Missing Authorization When Using @AuthorizeReturnObject in Spring Security 6.3.0 and 6.3.1 allows attacker to render sec

The AdRotate Banner Manager – The only ad manager you'll need plugin for WordPress is vulnerable to arbitrary file uploa

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0.

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affec

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1

A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as critical. Affect

A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been declared as problematic. A

A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Af

The BP Profile Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to boolean-based SQL Injection via the ‘model_num

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access and dele

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all

A vulnerability was found in itsourcecode Laravel Property Management System 1.0 and classified as critical. This issue

A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerabilit

A vulnerability classified as critical was found in itsourcecode Project Expense Monitoring System 1.0. This vulnerabili

A vulnerability classified as critical has been found in itsourcecode Project Expense Monitoring System 1.0. This affect

A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write v

A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been rated as critical. Affected

A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been declared as critical. Affec

A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been classified as critical. Aff

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue aff

A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. This