CVE-2024-38737

Technical details about CVE-2024-38737 are not present in the provided connected documents. Public information in these sources does not specify affected versions, root cause, impact, or remediation. Monitor for updates from official advisories and CVE records.

CVE-2024-38737: Missing Authorization

Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReDi Restaurant Reservation: from n/a through 24.0422...

httpd:2.4 security update

httpd 2.4.37-64.0.1 - Replace index.html with Oracle's index page oracleindex.html 2.4.37-64 - Resolves: RHEL-14448 - httpd: modmacro: out-of-bounds read vulnerability CVE-2023-31122 2.4.37-63 - modxml2enc: fix media type handling Resolves: RHEL-14321 modhttp2 1.15.7-10 - Resolves: RHEL-29817 -...

CVE-2024-31385

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

CVE-2024-31385

Technical details about CVE-2024-31385 (affected version, root cause, exploitability, fix) are not provided in the connected documents. The initial description notes a CSRF issue in ReDi Restaurant Reservation; monitor for official advisories for specifics.

CVE-2024-31385: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

CVE-2024-31299

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation allows Cross-Site Scripting XSS.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

CVE-2024-31299

CVE-2024-31299 describes a CSRF vulnerability in the ReDi Restaurant Reservation plugin for WordPress (Reservation Diary ReDi Restaurant Reservation). The issue allows Cross-Site Scripting (XSS) and affects ReDi Restaurant Reservation versions from n/a up to 24.0128. The provided documents do not...

CVE-2024-31299: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation allows Cross-Site Scripting XSS.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

Exploit for CVE-2024-22890

CVE-2024-22890: My e-Diary App - Cross-Site-Scr...

Malicious code in mfp-food-diary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 922a2a2aa1e588af220ee7d7266ea604a14e5dfa4c43ef09d3248c3d3adc1250 The OpenSSF Package Analysis project identified 'mfp-food-diary' @ 0.1.2 npm as malicious. It is considered malicious because: - The package...

CVE-2023-4741

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=diary/default/del of the component Delete Logs Handler. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

CVE-2023-4741: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=diary/default/del of the component Delete Logs Handler. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

IBOS SQL Injection Vulnerability

IBOS is a collaborative office management system. An SQL injection vulnerability exists in IBOS OA version 4.5.5, which originates from the component Delete Draft Handler. in the ?r=diary/default/del in the unknown section, resulting in sql injection...

SUSE CVE-2013-1853

Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database...

Diary Management System Cross-Site Scripting Vulnerability

Diary Management System is a multi-user diary management system that enables staff in an organization to set/update/view meetings and appointments. The system will run through a central server, but clients will be able to run offline. A cross-site scripting vulnerability exists in Diary Managemen...

CVE-2022-29004

Diary Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name parameter in search-result.php...

CVE-2022-29004

Diary Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name parameter in search-result.php...

CVE-2022-29004

Diary Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name parameter in search-result.php...

CVE-2022-29004

Diary Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name parameter in search-result.php...