2024

In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This c

In bff_Scanner_addOutPos of Scanner.c, there is a possible out-of-bounds write due to an incorrect bounds check. This co

Password Pusher, an open source application to communicate sensitive information over the web, comes with a configurable

DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/file_manage_v

An arbitrary file upload vulnerability in the component /admin/file_manage_control of DedeBIZ v6.3.0 allows attackers to

An arbitrary file upload vulnerability in the component /admin/friendlink_edit of DedeBIZ v6.3.0 allows attackers to exe

SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code v

A Local File Inclusion vulnerability in Vegam Solutions Vegam 4i versions 6.3.47.0 and earlier allows a remote attacker

An issue in Audimex EE versions 15.1.20 and earlier allowing a remote attacker to escalate privileges. Analyzing the off

A vulnerability was found in 115cms up to 20240807. It has been rated as problematic. Affected by this issue is some unk

A vulnerability was found in 115cms up to 20240807. It has been declared as problematic. Affected by this vulnerability

A vulnerability was found in 115cms up to 20240807. It has been classified as problematic. Affected is an unknown functi

A vulnerability was found in 115cms up to 20240807 and classified as problematic. This issue affects some unknown proces

In multiple functions of ShortcutService.java, there is a possible creation of a spoofed shortcut due to a missing permi

In query of DownloadManager.java, there is a possible read/write of arbitrary files due to a permissions bypass. This co

A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerabi

A vulnerability, which was classified as problematic, was found in Code4Berry Decoration Management System 1.0. This aff

A vulnerability, which was classified as critical, has been found in Code4Berry Decoration Management System 1.0. Affect

A vulnerability classified as critical was found in Code4Berry Decoration Management System 1.0. Affected by this vulner

2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Two interconne

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sandeep Verma HTML

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Weather Atlas Weat

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in petesheppar

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brainvireinfo Dyna

Cross-Site Scripting (XSS) vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to

File Upload vulnerability in change-image.php in Anuj Kumar's Boat Booking System version 1.0 allows local attackers to

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Esc

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Esc

2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Versions prior

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulner

The Clone plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.6 via des

Buffer overflow vulnerability in OllyDbg, version 1.10, which could allow a local attacker to execute arbitrary code due

Cross-Site Request Forgery (CSRF) vulnerability in aaronrobbins Post Ideas post-ideas allows SQL Injection.This issue af

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Navneil Naicer Bootscrap

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in webcodingplace Ultimate

Path Traversal: '.../...//' vulnerability in corporatezen222 Contact Page With Google Map contact-page-with-google-map a

Cross-Site Request Forgery (CSRF) vulnerability in Buying Buddy Buying Buddy IDX CRM buying-buddy-idx-crm allows Object

Deserialization of Untrusted Data vulnerability in ModelTheme QRMenu Restaurant QR Menu Lite qrmenu-lite allows Object I

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpopal Opal Woo Custom P

Deserialization of Untrusted Data vulnerability in masikonis Geolocator geolocator allows Object Injection.This issue af

Incorrect Privilege Assignment vulnerability in userplus UserPlus userplus allows Privilege Escalation.This issue affect

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Rajesh Thanoc

Deserialization of Untrusted Data vulnerability in xpresslane Xpresslane Fast Checkout xpresslane-integration-for-woocom

Deserialization of Untrusted Data vulnerability in Mark O'Donnell Team Rosters team-rosters allows Object Injection.This

Missing Authentication for Critical Function vulnerability in deco.agency de:branding debranding allows Privilege Escala

Missing Authentication for Critical Function vulnerability in Saul Morales Pacheco Banner System banner-system allows Pr

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page (Basi