17766 matches found
CVE-2024-23584
The CVE-2024-23584 entry concerns HCL BigFix Asset Discovery (Asset Discovery 109 and earlier) where the NMAP Importer service may expose data store credentials to users of the Windows Registry. Documented impact is credential exposure with a CVSS v3.1 base score of 6.6 (AV:N/AC:H/PR:H/UI:N/S:U/C...
Sync-Scheduler: The Premier Document Stealer
...
Best Student Result Management System v1.0 - Multiple SQL injection Vulnerability
Title: Best Student Result Management System v1.0 - Multiple SQLi Author: nu11secur1ty Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/15653/best-student-result-management-system-project-source-code-php-and-mysql-free-download Reference:...
Human Resource Management System v1.0 - Multiple SQL injection Vulnerability
Title: Human Resource Management System v1.0 - Multiple SQLi Author: nu11secur1ty Vendor: https://github.com/oretnom23 Software: https://www.sourcecodester.com/php/15740/human-resource-management-system-project-php-and-mysql-free-source-code.html Reference:...
Best Student Result Management System v1.0 - Multiple SQLi
Title: Best Student Result Management System v1.0 - Multiple SQLi Author: nu11secur1ty Date: 04/08/2024 Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/15653/best-student-result-management-system-project-source-code-php-and-mysql-free-download Reference:...
GHSA-RHH4-RH7C-7R5V vulnerabilities
Vulnerabilities for packages: wolfictl, kots, vault, k9s, terragrunt, gotenberg, chainctl, filebrowser, nuclei, zarf, kubescape...
CVE-2024-21506
Rejected reason: Duplicate of CVE-2024-5629...
The vulnerability of the package manager for Kubernetes Helm, related to the lack of protection for service data, allows a attacker to influence the confidentiality of information.
The vulnerability of the package manager for Kubernetes Helm is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to influence the confidentiality of sensitive information...
CVE-2024-29782
In tmugettrnumthresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
isd-bio.org Cross Site Scripting vulnerability OBB-3904748
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-25709 Self-XSS style in move item dialog
There is a stored Cross‑Site Scripting XSS vulnerability in Esri Portal for ArcGIS versions 11.2 and below that may allow a remote, authenticated attacker to create a crafted link that can be saved as a new location when moving an existing item, which could potentially execute arbitrary JavaScrip...
ohiosalary.info Cross Site Scripting vulnerability OBB-3901225
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
slavia.cz Cross Site Scripting vulnerability OBB-3899916
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...