2024

A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerabili

Cross-site scripting (XSS) vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject

Daily Expenses Management System version 1.0, developed by PHP Gurukul, contains a time-based blind SQL injection vulner

Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allow

Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows local

Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /strapi.io/_next/image.

SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azur

An issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption.

Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field

There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06 that

There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06. Att

There is a cross-site scripting vulnerability in the policy management UI of Absolute Secure Access prior to version 13.

There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06. Att

A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrar

There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06. Att

There is a cross-site scripting vulnerability in the pool configuration component of the management UI of Absolute Secur

There is an insufficient input validation vulnerability in the Warehouse component of Absolute Secure Access prior to 13

There is a cross-site scripting vulnerability in the Secure Access administrative UI of Absolute Secure Access prior to

There is a cross-site scripting vulnerability in the Policy management UI of Absolute Secure Access prior to version 13.

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prio

SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code

An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a

Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and all

Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged us

A vulnerability was found in itsourcecode Banking Management System 1.0 and classified as critical. Affected by this iss

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by t

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. Affected i

A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. This is

An issue in htop-dev htop v.2.20 allows a local attacker to cause an out-of-bounds access in the Header_populateFromSett

A vulnerability classified as critical was found in itsourcecode Loan Management System 1.0. This vulnerability affects

A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unk

A vulnerability was found in itsourcecode Farm Management System 1.0. It has been rated as critical. Affected by this is

A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on t

Cross Site Scripting (XSS) vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider:

A vulnerability was found in Tenda A301 15.13.08.12. It has been classified as critical. Affected is the function fromSe

A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some un

The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versi

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to identity spoofing by an authenticated user due to improper

A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects unknown code

A vulnerability, which was classified as critical, was found in Ruijie RG-UAC 1.0. This affects an unknown part of the f

The Kiuwan Local Analyzer (KLA) Java scanning application contains several hard-coded secrets in plain text format. In

Kiuwan provides an API endpoint /saas/rest/v1/info/application to get information about any application, providing on

For Kiuwan installations with SSO (single sign-on) enabled, an unauthenticated reflected cross-site scripting attack ca

When the Kiuwan Local Analyzer uploads the scan results to the Kiuwan SAST web application (either on-premises or cloud

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC 1.0. Affected by this issue is the fu

A vulnerability classified as critical was found in Ruijie RG-UAC 1.0. Affected by this vulnerability is an unknown func

A vulnerability classified as problematic has been found in EZ-Suite EZ-Partner 5. Affected is an unknown function of th