2024

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jordan Lyall MyTwe

Cross-Site Request Forgery (CSRF) vulnerability in anciwasim Back Link Tracker back-link-tracker allows Blind SQL Inject

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in nyasro Rate Own Po

Cross-Site Request Forgery (CSRF) vulnerability in Henrique Rodrigues SafetyForms safetymails-forms allows Blind SQL Inj

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SermonAudio Sermon

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in developersnote Sim

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sanjeev SW Contact

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brandon White Auth

Cross-Site Request Forgery (CSRF) vulnerability in Stefan Nour AVChat Video Chat avchat-3 allows Stored XSS.This issue a

Cross-Site Request Forgery (CSRF) vulnerability in sh4d0w28 GoogleDrive folder list googledrive-folder-list allows Store

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle MPG mult

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory EU/UK VA

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hasan movahed Dupl

Cross-Site Request Forgery (CSRF) vulnerability in aatmaadhikari Apa Banner Slider apa-banner-slider allows SQL Injectio

Cross-Site Request Forgery (CSRF) vulnerability in aatmaadhikari APA Register Newsletter Form apa-register-newsletter-fo

Incorrect Privilege Assignment vulnerability in gerryworks GERRYWORKS Post by Mail gerryworks-post-by-mail allows Privil

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DotsquaresLtd Goog

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unizoe Web Solutio

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahriar Alam All

A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been classified as critical.

A vulnerability has been found in didi DDMQ 1.0 and classified as critical. Affected by this vulnerability is an unknown

A vulnerability classified as critical has been found in Codezips Sales Management System 1.0. This affects an unknown p

A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue

A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vu

A vulnerability classified as critical was found in PHPGurukul Boat Booking System 1.0. Affected by this vulnerability i

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been rated as critical. This issue affects some

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been declared as critical. This vulnerability af

Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Serv

The `add_llm` function in `llm_app.py` in infiniflow/ragflow version 0.11.0 contains a remote code execution (RCE) vulne

Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Se

Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to

Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to

A vulnerability classified as critical was found in Tenda AC8 16.03.34.06. This vulnerability affects the function formS

A vulnerability was found in Tenda AC8 16.03.34.06. It has been declared as critical. Affected by this vulnerability is

A vulnerability was found in wfh45678 Radar up to 1.0.8 and classified as critical. This issue affects some unknown proc

The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to,

A vulnerability has been found in wfh45678 Radar up to 1.0.8 and classified as critical. This vulnerability affects unkn

Lakeside Software’s SysTrack LsiAgent Installer version 10.7.8 for Windows contains a local privilege escalation vulnera

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ajberasategui AB C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nikhilvaghela Add

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in emka73 ADIF Log Se

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mahesh_9696 Mitm B

There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user

A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software trusts

The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.

A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the impro

A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the impro

A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software fails

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability