2024

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from

A vulnerability classified as critical has been found in SourceCodester Complete E-Commerce Site 1.0. Affected is an unk

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially cra

Cross Site Scripting (XSS) vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute ar

An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrar

Stored Cross-Site Scripting (XSS) vulnerability in tramyardg autoexpress 1.3.0, allows remote unauthenticated attackers

A vulnerability, which was classified as critical, was found in Campcodes Complete Online DJ Booking System 1.0. Affecte

A vulnerability, which was classified as critical, has been found in Campcodes Complete Online DJ Booking System 1.0. Th

A vulnerability, which was classified as critical, was found in ZhiCms 4.0. Affected is the function index of the file a

A vulnerability, which was classified as critical, has been found in ZhiCms 4.0. This issue affects the function getinde

A vulnerability was found in OpenBMB XAgent 1.0.0. It has been declared as critical. Affected by this vulnerability is a

JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.6, an attacker can

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.8.0 and prior to version 1.40.4, Deno i

RSSHub is an open source RSS feed generator. Prior to version 1.0.0-master.a429472, RSSHub allows remote attackers to us

RSSHub is an open source RSS feed generator. Starting in version 1.0.0-master.cbbd829 and prior to version 1.0.0-master.

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in Dotclear version 2.29. The flaw exists withi

Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a

Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, a user could type HTML int

OpenZeppelin Contracts is a library for secure smart contract development. The `Base64.encode` function encodes a `bytes

Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability

An access control issue in Dreamer CMS v4.0.1 allows attackers to download backup files and leak sensitive information.

An issue in zuoxingdong lagom v.0.1.2 allows a local attacker to execute arbitrary code via the pickle_load function of

Cross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbitrary code via a crafted script

EspoCRM is an Open Source Customer Relationship Management software. An attacker can inject arbitrary IP or domain in "P

SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET r

Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information

IBM InfoSphere Information Server 11.7 stores potentially sensitive information in log files that could be read by a loc

An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to us

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Cross-Site Request Forgery in

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized loss of data due

The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortco

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML Tag attributes in all v

The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-S

The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Cross-Site Req

The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Cross-Site Req

Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files

The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortco

The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortco

A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allo

A cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees Management System v1.0 a

A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allo

SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive informatio

A vulnerability was found in Folio Spring Module Core up to 1.1.5. It has been rated as critical. Affected by this issue

A Cross Site Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker to execut

Cross Site Scripting (XSS) vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary cod

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Management modul

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Role Management modul

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Privilege Management

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notice Manage module.

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component {{rootpath}