2024

SQL Injection vulnerability in MegaBIP software allows attacker to disclose the contents of the database, obtain session

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Apache StreamPipes user self-regist

Improper Control of Generation of Code ('Code Injection') vulnerability in Next4Biz CRM & BPM Software Business Process

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Next4Biz CRM & BPM

The decrypted configuration file contains the password in cleartext which is used to configure WINSelect. It can be use

The configuration file is encrypted with a static key derived from a static five-character password which allows an att

The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file syst

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser

Bludit uses predictable methods in combination with the MD5 hashing algorithm to generate sensitive tokens such as the A

Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords

A session fixation vulnerability in Bludit allows an attacker to bypass the server's authentication if they can trick an

A security vulnerability has been identified in Bludit, allowing authenticated attackers to execute arbitrary code throu

A security vulnerability has been identified in Bludit, allowing attackers with knowledge of the API token to upload arb

The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contr

The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This a

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by

A vulnerability has been found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affect

A vulnerability, which was classified as critical, was found in lahirudanushka School Management System 1.0.0/1.0.1. Aff

A Cross-Site Request Forgery (CSRF) vulnerability exists in the XTTS server of parisneo/lollms version 9.6 due to a lax

A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1

A vulnerability classified as critical was found in lahirudanushka School Management System 1.0.0/1.0.1. This vulnerabil

A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affec

A remote code execution vulnerability exists in the create_conda_env function of the parisneo/lollms repository, version

Click Studios Passwordstate Core before 9.8 build 9858 allows Authentication Bypass.

MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a

A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as problematic. Affected by

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe

A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'add_reference_to_local_mode

A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects the function

A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1

A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected b

A vulnerability classified as critical has been found in Pear Admin Boot up to 2.0.2. Affected is an unknown function of

IBM Security SOAR 51.0.2.0 could allow an authenticated user to execute malicious code loaded from a specially crafted s

CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the `ExtensionBuilder().bui

A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this i

A vulnerability has been found in Zorlan SkyCaiji up to 2.8 and classified as problematic. Affected by this vulnerabilit

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the

Apache Allura's neighborhood settings are vulnerable to a stored XSS attack.  Only neighborhood admins can access these

The ARMember Premium plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows a

The UberMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.

The Bricks Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inc

This affects versions of the package opencart/opencart from 4.0.0.0. An Arbitrary File Creation issue was identified via

This affects versions of the package opencart/opencart from 4.0.0.0. A Zip Slip issue was identified via the marketplace

This affects versions of the package opencart/opencart from 4.0.0.0. A reflected XSS issue was identified in the redirec

This affects versions of the package opencart/opencart from 4.0.0.0 and before 4.1.0.0. A reflected XSS issue was identi

This affects versions of the package opencart/opencart from 4.0.0.0. A reflected XSS issue was identified in the filenam

This affects versions of the package opencart/opencart from 0.0.0. An SQL Injection issue was identified in the Divido p

The Grey Opaque theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the them