2117 matches found
CVE-2024-1272
Inclusion of Sensitive Information in Source Code vulnerability in TNB Mobile Solutions Cockpit Software allows Retrieve Embedded Sensitive Data. This issue affects Cockpit Software: before v0.251.1...
CVE-2024-35474
A Directory Traversal vulnerability in iceice666 ResourcePack Server before v1.0.8 allows a remote attacker to disclose files on the server, via setPath in ResourcePackFileServer.kt...
CVE-2023-2356
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
CVE-2023-2341
Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.21...
CVE-2023-2240
Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...
CVE-2023-1887
Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1890
The Tablesome WordPress plugin before 1.0.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting...
CVE-2023-1319
Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...
CVE-2023-1307
Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13...
CVE-2023-1244
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1211
SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2...
CVE-2023-0919
Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0...
CVE-2023-0676
Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1...
CVE-2023-1243
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-0438
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.0.4...
CVE-2023-1105
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-0334
The ShortPixel Adaptive Images WordPress plugin before 3.6.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against any high privilege users such as admin...
CVE-2023-1703
Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...
CVE-2022-40147
A vulnerability has been identified in Industrial Edge Management All versions V1.5.1. The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between...