2024

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where

SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in

An issue inandrei-tatar nora-firebase-common between v.1.0.41 and v.1.12.2 allows a remote attacker to execute arbitrary

A server-side request forgery (SSRF) was discovered in the Akana API Platform in versions prior to and including 2022.1.

Judge0 is an open-source online code execution system. The default configuration of Judge0 leaves the service vulnerable

Judge0 is an open-source online code execution system. The application uses the UNIX chown command on an untrusted file

Judge0 is an open-source online code execution system. The application does not account for symlinks placed inside the s

Improper Control of Generation of Code ('Code Injection') vulnerability in Deepak anand WP Dummy Content Generator wp-du

Missing Authorization vulnerability in Support Genix.This issue affects Support Genix: from n/a through 1.2.3.

A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbit

HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This

FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266

SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows a

jizhiCMS 2.5 suffers from a File upload vulnerability.

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 all

SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arb

SQL Injection vulnerability in /edit-computer-detail.php in phpgurukul Cyber Cafe Management System Using PHP & MySQL v1

SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arb

Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo fun

Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromVir

Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle fun

An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0

In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx - call finalize with bh disabled Wh

In the Linux kernel, the following vulnerability has been resolved: igc: avoid returning frame twice in XDP_REDIRECT W

In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() I

Unrestricted Upload of File with Dangerous Type vulnerability in Poll Maker & Voting Plugin Team (InfoTheme) WP Poll Mak

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). Supported versions that

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI). Suppo

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony E

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony E

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony E

A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary c

The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss v22.6.1 is vulnerable to command injection in `finetun

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `git_caption_g

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `group_images_

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to command injection in basic_caption_g

The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements mul

mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass

A command injection vulnerability exists in the run-llama/llama_index repository, specifically within the safe_eval func

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution (RCE) by sendi

A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpo

lunary-ai/lunary is vulnerable to an authentication issue due to improper validation of email addresses during the signu

An SQL injection vulnerability exists in the `delete_discussion()` function of the parisneo/lollms-webui application, al

A mass assignment vulnerability exists in the `/api/invite/:code` endpoint of the mintplex-labs/anything-llm repository,

A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitr

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitr

An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to edit device settings via the

Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify