17766 matches found
MSMS-PHP 1.0 SQL Injection
Title: MSMS-PHP by: oretnom23 v1.0 Multiple-SQLi Author: nu11secur1ty Date: 03/13/2024 Vendor: https://github.com/oretnom23 Software: https://www.sourcecodester.com/php/14924/online-mobile-store-management-system-using-php-free-source-code.html Reference:...
ROS-2-995
2.995 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...
CVE-2024-21330 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
...
CVE-2023-48788
creationtimestamp| type| source ---|---|--- 2024-03-12 16:26:39+00:00| seen| https://t.me/ctinow/205806 2024-03-12 16:32:08+00:00| seen| https://t.me/ctinow/205822 2024-03-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1246 2024-03-13 15:30:05+00:00| seen|...
CVE-2024-2049
Summary: CVE-2024-2049 is a SSRF vulnerability in Citrix SD-WAN Standard/Premium Editions (11.4.0–11.4.4.46). The issue allows an attacker to disclose limited information from the appliance via access to the management IP. Affected products/versions: Citrix SD-WAN Standard/Premium Editions on or ...
CVE-2019-19501
creationtimestamp| type| source ---|---|--- 2024-03-12 08:41:47+00:00| seen| https://t.me/ctinow/205373...
CVE-2023-6814
The CVE-2023-6814 issue affects Hitachi Cosminexus Component Container and is caused by insertion of sensitive information into log files, leading to local information disclosure. Affected versions include 11-00 through 11-00-12, 11-10 through 11-10-10, 11-20 through 11-20-07, 11-30 through 11-30...
Authentication flaw
Under certain conditions, Support Web Pages of SAP NetWeaver Process Integration PI - versions 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application...
CVE-2024-26521
CE Phoenix (e-commerce software), version v1.0.8.20 and earlier , contains an HTML Injection vulnerability in the english.php component. The root cause is the insufficient neutralization of special characters , which allows a remote attacker to use a crafted payload to execute arbitrary code , es...
CVE-2024-27237
CVE-2024-27237 involves a logic error in wipe_ns_memory() within nsmemwipe.c that can cause an incorrect size calculation. This flaw permits local information disclosure without requiring elevated privileges or user interaction. The vulnerability is described across multiple sources (NVD/Red Hat/...
CVE-2024-27206
A vulnerability in the Modem component of Google Pixel devices allows for an out-of-bounds read due to a missing bounds check. This flaw could lead to remote information disclosure without requiring additional execution privileges or user interaction. The issue is addressed in security patch leve...
CVE-2024-28816
The Student Information Chatbot version a0196ab , a cloud-based student information system developed by Aarav Raj Singh, is vulnerable to SQL injection . The flaw exists in the login function within the index.php file, specifically caused by improper neutralization of special elements when proces...
CVE-2024-2313
CVE-2024-2313 affects bpftrace (and related packages across several Linux distros). The issue arises when kernel headers must be extracted: bpftrace may load headers from a temporary directory, enabling an unprivileged user to force loading of compromised Linux headers. Local, high-privilege-seek...
realtyexecutivesplus.ca Cross Site Scripting vulnerability OBB-3869030
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-49341
The Newland Nquire 1000 Interactive Kiosk (version NQ1000-II_G_V1.00.011 ) contains a vulnerability that allows remote attackers to obtain sensitive information. The root cause is cleartext credential storage within the backup.htm component. To mitigate the risk, it is recommended to restrict acc...
CVE-2024-23292
CVE-2024-23292 affects Apple platforms: macOS Sonoma 14.4, iOS 17.4, and iPadOS 17.4. The issue allows an app to access information about a user’s contacts due to inadequate data protection. The root cause is addressed in these updates with improved data protection, and Apple lists the fixed vers...
CVE-2023-41014
CVE-2023-41014 affects code-projects.org Online Job Portal 1.0. The vulnerability is a SQL Injection via the Username parameter for the “Employer” context, as described across multiple sources. The available documents do not specify a patched version or remediation steps. The root cause is not ex...
NDtaskmatic 1.0 SQL Injection
Title: NDtaskmatic-1.0-by-Mayuri.K Multiple-SQLi Author: nu11secur1ty Date: 03/07/2024 Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/17217/employee-management-system-php-and-mysql-free-download.html Reference: https://portswigger.net/web-security/sql-injection...
CVE-2023-52605
REJECTED CVE A NULL pointer dereference issue was identified in the Linux kernel within the ACPI subsystem's extlog module. In the extlogexit function, the extlogl1addr pointer was dereferenced before verifying if it was NULL, potentially causing system instability or crashes during the cleanup...