2024

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component 'erp.07fly.net:80/admin/

Cross Site Scripting vulnerability in Virtuozzo Hybrid Server for WHMCS Open Source v.1.7.1 allows a remote attacker to

Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by def

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, pos

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-edi

zenml-io/zenml version 0.56.4 is vulnerable to an account takeover due to the lack of rate-limiting in the password chan

A Reflected Cross-Site Scripting (XSS) vulnerability was found in the /search-result.php page of the PHPGurukul User Reg

An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management Sy

matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. The provisioning API of the matrix-apps

A vulnerability has been found in SourceCodester Best Employee Management System 1.0 and classified as critical. This vu

A vulnerability, which was classified as critical, was found in SourceCodester Best Employee Management System 1.0. This

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing speciall

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/admin_user.php in KASHIPARA E-learning Management

A vulnerability, which was classified as critical, has been found in SourceCodester Best Employee Management System 1.0.

A vulnerability classified as critical has been found in EyouCMS up to 1.6.7. Affected is an unknown function of the com

A vulnerability was found in EyouCMS 1.51. It has been rated as critical. This issue affects the function editFile of th

A Directory listing issue was found in PHPGurukul User Registration & Login and User Management System 3.2, which allows

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/school_year.php in KASHIPARA E-learning Management

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Man

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management Syste

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management

Absolute path traversal (incorrect restriction of a path to a restricted directory) vulnerability in the EasyPHP web ser

A vulnerability was found in Apereo CAS 6.6. It has been classified as critical. This affects an unknown part of the fil

An issue has been discovered in GitLab CE/EE affecting all versions from 16 before 17.3.7, 17.4 before 17.4.4, and 17.5

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 pr

A vulnerability has been found in Apereo CAS 6.6 and classified as problematic. Affected by this vulnerability is an unk

Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows fro

IBM Security SOAR 51.0.1.0 and earlier contains a mechanism for users to recover or change their passwords without knowi

IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arb

A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_co

A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack o

Harbor fails to validate the user permissions when updating tag immutability policies.  By sending a request to update

Harbor fails to validate the user permissions when updating a robot account that belongs to a project that the authentic

An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.3.7, 17.4 before 17.4.4, and 17.

A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Pan

A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authent

An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a

A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use

VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF)

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass

The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it ba

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for

Ruijie NBR800G gateway NBR_RGOS_11.1(6)B4P9 is vulnerable to command execution in /itbox_pi/networksafe.php via the prov

A buffer overflow in the RecvSocketData function of Inovance HCPLC_AM401-CPU1608TPTN 21.38.0.0, HCPLC_AM402-CPU1608TPTN