2024

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnera

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reserv_i

This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Cor

A hard-coded password in the FileCatalyst TransferAgent can be found which can be used to unlock the keystore from which

A vulnerability, which was classified as critical, has been found in itsourcecode Simple Online Hotel Reservation System

IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could a

A vulnerability classified as critical was found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by

A vulnerability classified as critical has been found in itsourcecode Monbela Tourist Inn Online Reservation System up t

A vulnerability classified as critical was found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This vu

A vulnerability classified as critical has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0. Th

A vulnerability was found in itsourcecode Magbanua Beach Resort Online Reservation System up to 1.0. It has been rated a

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. Affected by

A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL  independently witho

In JetBrains Hub before 2024.2.34646 stored XSS via project description was possible

In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for w

In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site

In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles

A vulnerability was found in Genexis Tilgin Home Gateway 322_AS0500-03_05_13_05. It has been classified as problematic.

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user t

When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.25.1 d

The Expert Invoice WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow h

The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which co

The Lightbox & Modal Popup WordPress Plugin WordPress plugin before 2.7.28, foobox-image-lightbox-premium WordPress plu

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An auth

vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor wi

vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor wi

Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability

Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR.

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability

Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may expose sensitive traffic be

The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.

The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to unauthorized loss of data due to a missing

The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

The Scheduling Plugin – Online Booking for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due

The PDF Viewer for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the render function i

A vulnerability has been found in itsourcecode Pool of Bethesda Online Reservation System up to 1.0 and classified as cr

A vulnerability, which was classified as critical, was found in PHPVibe 11.0.46. Affected is an unknown function of the

A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown

A vulnerability classified as critical was found in Intelbras InControl 2.21.56. This vulnerability affects unknown code

A vulnerability classified as critical was found in SourceCodester Music Class Enrollment System 1.0. Affected by this v

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affecte

A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. This issue a

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerabil

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects

A stored cross-site scripting (XSS) in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts o

Cross-site scripting (XSS) vulnerability in search-appointment.php in the Admin Panel in Phpgurukul Beauty Parlour Manag

Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settin

Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to e