2024

A vulnerability was found in SourceCodester Daily Habit Tracker 1.0. It has been declared as problematic. Affected by th

A vulnerability was found in Mini-Tmall up to 20231017 and classified as critical. This issue affects some unknown proce

parse-server is a Parse Server for Node.js / Express. This vulnerability allows SQL injection when Parse Server is confi

A vulnerability has been found in SourceCodester Block Inserter for Dynamic Content 1.0 and classified as critical. This

A vulnerability, which was classified as problematic, was found in SourceCodester Flashcard Quiz App 1.0. This affects a

A vulnerability, which was classified as problematic, has been found in SourceCodester FAQ Management System 1.0. Affect

A Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows an attacker to execute arbitrary code via a crafted scrip

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via /update-article.php.

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /save_settings.

Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting (XSS) within the blog title of the settings.

In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain len

In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wr

In OpenBSD 7.4 before errata 009, a race condition between pf(4)'s processing of packets and expiration of packet states

A vulnerability classified as problematic was found in SourceCodester FAQ Management System 1.0. Affected by this vulner

A vulnerability classified as critical has been found in SourceCodester FAQ Management System 1.0. Affected is an unknow

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been rated as problematic. This issue

Bagisto v1.5.1 is vulnerable for Cross site scripting(XSS) via png file upload vulnerability in product review option.

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 10.8.3, the exact Dire

Directus is a real-time API and App dashboard for managing SQL database content. The password reset mechanism of the Dir

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vu

** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Arch

** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva. Apache Archiva has a setting t

An OS Command Injection vulnerability affecting documentation server on 3DEXPERIENCE from Release 3DEXPERIENCE R2022x th

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulner

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This a

A vulnerability was found in SourceCodester Barangay Population Monitoring System up to 1.0 and classified as problemati

Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.

A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Enterprise Security Manager (ESM). The

Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8    Impact : As it will be st

A vulnerability has been found in rahman SelectCours 1.0 and classified as problematic. Affected by this vulnerability i

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the updateCurAPlist fu

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the makeCurRemoteApLis

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generate_conf_rout

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the init_nvram functio

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apn_name_3g parameter in the setupEC20Apn fun

LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow via the vpn_client_ip parameter in the config_vpn_pp

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability i

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability.

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability.

Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotte

In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently ERO

Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive informatio

Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive informatio

A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. A

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0.

A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. This vulnerabili

A vulnerability classified as critical has been found in SourceCodester Petrol Pump Management Software 1.0. This affect

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability i

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper authorization vulnerability. An adja

Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the