2024

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_page.php?li

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php?

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room o

Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner ca

A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or

An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday f

A vulnerability was found in demozx gf_cms 1.0/1.0.1. It has been classified as critical. This affects the function init

A vulnerability was found in Go-Tribe gotribe-admin 1.0 and classified as problematic. Affected by this issue is the fun

A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release

A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEX

An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPER

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php.

Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure.

Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the homepage, xmpp, and matrix par

Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in information d

Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code executio

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause a

A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System v2.0 allows attackers t

A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allows attacker

A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attack

A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows attackers

A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory System v2.0 allows atta

A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attacker

A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers

A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers t

A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory System v2.0 allows attacker

A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows attackers

A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 allows attack

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport paramet

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password paramete

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/co

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/in

An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a c

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number

A cross-site scripting (XSS) vulnerability in the component update_page_details.php of Blood Bank And Donation Managemen

An issue in the login component (process_login.php) of Hotel Management System commit 79d688 allows attackers to authent

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter

A Cross-Site Request Forgery (CSRF) in the component admin_modify_room.php of Hotel Management System commit 91caab8 all

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type paramet

A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit 91caab8 al