2024

A directory traversal vulnerability exists in the stitionai/devika repository, specifically within the /api/download-pro

A directory traversal vulnerability exists in the /api/download-project-pdf endpoint of the stitionai/devika repository,

A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerabili

An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows a privileg

IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unautho

Parsing a corrupt or malicious image with invalid color indices can cause a panic.

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scripting. This vulnera

IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 uses weaker than expected cryptographic algorithms that cou

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivil

In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent co

TELSAT marKoni FM Transmitters are vulnerable to users gaining unauthorized access to sensitive information or performin

TELSAT marKoni FM Transmitters are vulnerable to an attacker bypassing authentication and gaining administrator privileg

TELSAT marKoni FM Transmitters are vulnerable to an attacker exploiting a hidden admin account that can be accessed thro

TELSAT marKoni FM Transmitters are vulnerable to a command injection vulnerability through the manipulation of settings

IBM Security Verify Access 10.0.0.0 through 10.0.7.1, under certain configurations, could allow an unauthenticated attac

Buffer overflow in the extract_openvpn_cr function in openvpn-cr.c in openvpn-auth-ldap (aka the Three Rings Auth-LDAP p

IBM Security Verify Access 10.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from trace l

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as problematic. This iss

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mud

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mu

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mud

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mu

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mud

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.php?mudi=d

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talya Informatics

A vulnerability has been found in itsourcecode Online Food Ordering System up to 1.0 and classified as critical. This vu

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affec

A vulnerability, which was classified as critical, has been found in itsourcecode Pool of Bethesda Online Reservation Sy

Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorr

A vulnerability classified as problematic was found in LabVantage LIMS 2017. Affected by this vulnerability is an unknow

A vulnerability classified as problematic has been found in LabVantage LIMS 2017. Affected is an unknown function of the

A vulnerability was found in LabVantage LIMS 2017. It has been rated as problematic. This issue affects some unknown pro

A vulnerability was found in LabVantage LIMS 2017. It has been declared as problematic. This vulnerability affects unkno

The Portfolio Gallery – Image Gallery Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p

Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer ma

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability

Reliance on Cookies without Validation and Integrity Checking vulnerability in Talya Informatics Elektraweb allows Sessi

An issue was discovered in SoftMaker Office 2024 / NX before revision 1214 and SoftMaker FreeOffice 2014 before revision

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre

The Create by Mediavine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Schema Meta s

A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user ca

Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious

The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allows an attacker to utilize a false URL and

The WP Chat App WordPress plugin before 3.6.5 does not sanitise and escape some of its settings, which could allow high

The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and a

The kadence-blocks-pro WordPress plugin before 2.3.8 does not prevent users with at least the contributor role using som

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL parameter of

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter i