2024

Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at h

Cross Site Scripting (XSS) vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows att

In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title

The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ attrib

The User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Logo

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author_meta_ta

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘archive_title_

nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which

nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which

nGrinder before 3.5.9 allows to set delay without limitation, which could be the cause of Denial of Service by remote at

nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote atta

nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via uns

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing ar

The WP Chat App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget/block in all v

The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This v

Calendar functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting all

Class functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowi

News functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing

Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the au

Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code

A cross-site scripting (XSS) vulnerability in XunRuiCMS up to v4.6.2 allows attackers to execute arbitrary web scripts o

Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0

Cross Site Scripting (XSS) vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification co

SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/adm

Heap based buffer flow in zlog v1.1.0 to v1.2.17 in zlog_rule_new().The size of record_name is MAXLEN_PATH(1024) + 1 but

A privilege escalation vulnerability was discovered in GitLab affecting versions 16.8 prior to 16.8.4 and 16.9 prior to

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to

An issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x before 2.15.4, allows attackers to escalate privil

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via

Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.php

Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the npss parameter at rooms.ph

A cross-site scripting (XSS) vulnerability in the component /management/term of School Fees Management System v1.0 allow

A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow att

Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerability via the

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to

Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canaryt

Go SDK for CloudEvents is the official CloudEvents SDK to integrate applications with CloudEvents. Prior to version 2.15

Shopware is an open commerce platform based on Symfony Framework and Vue. The Symfony Session Handler pops the Session C

Sulu is a PHP content management system. Starting in verson 2.2.0 and prior to version 2.4.17 and 2.5.13, access to page

Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumstances return invalid

JSONata is a JSON query and transformation language. Starting in version 1.4.0 and prior to version 1.8.7 and 2.0.4, a m

RobotsAndPencils go-saml, a SAML client library written in Go, contains an authentication bypass vulnerability in all kn

Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap c

Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exp

Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of b