Zoom (for Android, IOS, Linux, MacOS, And Windows) Security Vulnerabilities
A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...
7.3CVSS
EPSS
A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...
7.3CVSS
7.6AI Score
EPSS
A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...
6.3CVSS
6.8AI Score
EPSS
A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...
6.3CVSS
EPSS
CVE-2024-6043 SourceCodester Best House Rental Management System admin_class.php login sql injection
A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...
7.3CVSS
EPSS
CVE-2024-6042 itsourcecode Real Estate Management System property-detail.php sql injection
A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...
6.3CVSS
EPSS
A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...
6.3CVSS
EPSS
A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...
6.3CVSS
6.8AI Score
EPSS
CVE-2024-6041 itsourcecode Gym Management System manage_user.php sql injection
A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...
6.3CVSS
EPSS
Ghost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection mechanism by using many X-Forwarded-For headers with different values. NOTE: the vendor's position is that Ghost should be installed with a reverse proxy that allows only trusted X-Forwarded-For...
7.5AI Score
EPSS
A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public....
6.3CVSS
EPSS
A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public....
6.3CVSS
6.8AI Score
EPSS
Ghost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection mechanism by using many X-Forwarded-For headers with different values. NOTE: the vendor's position is that Ghost should be installed with a reverse proxy that allows only trusted X-Forwarded-For...
EPSS
CVE-2024-6039 Feng Office Workspaces sql injection
A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public....
6.3CVSS
EPSS
3.7CVSS
4.8AI Score
0.001EPSS
7.5AI Score
0.0004EPSS
7.8AI Score
EPSS
7.9AI Score
EPSS
7.5CVSS
8.8AI Score
0.001EPSS
9.8CVSS
9.7AI Score
0.001EPSS
7.5CVSS
7.5AI Score
0.001EPSS
7.5AI Score
7.5AI Score
GHSA-95PR-FXF5-86GV vulnerabilities
Vulnerabilities for packages: slsa-verifier, flux-source-controller, zot, gitsign, policy-controller, neuvector-sigstore-interface, apko, kubescape, ko, wolfictl, tekton-chains, falco, melange, goreleaser, tkn, aactl, falcoctl, spire-server, skaffold, vexctl,...
7.5AI Score
GHSA-2C7C-3MJ9-8FQH vulnerabilities
Vulnerabilities for packages: argo-workflows, slsa-verifier, terragrunt, flux-source-controller, external-secrets-operator, argo-cd, traefik, flux-kustomize-controller, gitsign, oauth2-proxy, sops, kubescape, dex, fulcio, kyverno, tekton-chains, cert-manager, kots, cosign, falco,...
7.5AI Score
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: kine, argo-workflows, kube-bench, keda, k3s, step-ca, spicedb, kots, telegraf, amass, temporal-server, caddy, trillian, vault, src,...
9.8CVSS
9.7AI Score
0.0004EPSS
GHSA-232P-VWFF-86MP vulnerabilities
Vulnerabilities for packages: helm, apko, bom, ctop, up, ko,...
7.5AI Score
CVE-2023-46402 vulnerabilities
Vulnerabilities for packages: argo-workflows, flux-notification-controller, argo-cd, pulumi-kubernetes-operator,...
7.5CVSS
7.7AI Score
0.0005EPSS
7.5AI Score
7.5AI Score
7.5AI Score
7.5CVSS
7.7AI Score
0.001EPSS
7.5CVSS
7.5AI Score
0.001EPSS
7.5AI Score
5.3CVSS
7.2AI Score
0.0005EPSS
7.5AI Score
7.2CVSS
7.3AI Score
0.0004EPSS
GHSA-X84C-P2G9-RQV9 vulnerabilities
Vulnerabilities for packages: policy-controller, docker-compose, buf, helm-push, dagger, prometheus, tekton-pipelines, syft, grype, cri-tools, harbor-scanner-trivy, neuvector-scanner, wolfictl, k3d, melange, kaniko,...
7.5AI Score
CVE-2024-21626 vulnerabilities
Vulnerabilities for packages: kubernetes, ctop, ingress-nginx-controller, telegraf, grype, zot, nvidia-device-plugin, kubescape, datadog-agent, syft, nerdctl, wolfictl, kaniko, k9s, k3s, kots, skopeo, trivy, zarf, buildkitd, runc, newrelic-infrastructure-agent, cadvisor, docker, skaffold,...
8.6CVSS
9.2AI Score
0.051EPSS
7.2AI Score
0.0004EPSS
7.1AI Score
0.0004EPSS
8.8CVSS
7.1AI Score
0.003EPSS
7.2AI Score
0.0004EPSS
7.2AI Score
0.0004EPSS
7.5AI Score
7.2AI Score
0.0004EPSS
7.2AI Score
0.0004EPSS
7.2AI Score
0.0004EPSS
7.2AI Score
0.0004EPSS
7.2AI Score
0.0004EPSS