231583 matches found
CVE-2024-2245
moziloCMS 2.0 is affected by CVE-2024-2245: a Cross-Site Scripting flaw allows a JavaScript payload to be executed by sending a POST to /install.php, targeting the username parameter. This is supported by multiple connected sources describing the same vulnerability; exploitation status and fixes ...
CVE-2024-0818
CVE-2024-0818 affects PaddlePaddle (
Design/Logic Flaw
In JetBrains YouTrack before 2024.1.25893 creation comments on behalf of an arbitrary user in HelpDesk was possible...
Design/Logic Flaw
In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles...
Code injection
In JetBrains YouTrack before 2024.1.25893 attaching/detaching workflow to a project was possible without project admin permissions...
CVE-2024-28230
Summary of CVE-2024-28230 : JetBrains YouTrack versions prior to 2024.1.25893 allow attaching/detaching a workflow to a project without project admin permissions, enabling possible unauthorized workflow management. Reported by Red Hat and other sources, with CVSS v3.1 base score 6.5 (Medium) / Ne...
CVE-2024-28229
CVE-2024-28229 affects JetBrains YouTrack prior to 2024.1.25893. The issue arises from insufficient authorization, allowing a user without appropriate permissions to restore issues and articles. Impact is limited to unauthorized restoration capability; no details about exploitation in the wild ar...
Design/Logic Flaw
NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can cause denial of service by a certain code path that can lead to an infinite loop. Unbound 1.18.0 introduced a feature that removes EDE records from responses with size higher than the client's...
Cross site scripting
The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 7.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-22256
CVE-2024-22256 affects VMware Cloud Director. The vulnerability is a partial information disclosure that could allow a malicious actor to gather information about organization names based on the instance’s behavior. According to VMware’s advisory and related sources, the issue has a CVSSv3 base s...
CVE-2024-1534
CVE-2024-1534 affects Booster for WooCommerce (WordPress). The vulnerability is a Stored Cross-Site Scripting (XSS) in shortcode handling due to insufficient input sanitization and output escaping on user-supplied attributes. Affected versions are up to 7.1.7; exploitation requires contributor+ p...
CVE-2024-1931
CVE-2024-1931 affects NLnet Labs Unbound 1.18.0 through 1.19.1. The issue is an infinite loop in a code path that trims EDE record text when the client buffer is smaller than needed, triggered when ede: yes is configured. From 1.19.2 a fix was applied; Fedora/RH advisories show 1.19.3 includes th...
Design/Logic Flaw
The Restaurant Reservations plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the ndrstlayout attribute of the ndrstsearch shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to include and...
Sql injection
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the docnumber parameter at hisadminviewsingleemployee.php...
Sql injection
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisdocviewsinglepatien.php...
Sql injection
Student Enrollment In PHP v1.0 was discovered to contain a SQL injection vulnerability via the Login function...
Remote code execution
remote code execution in paddlepaddle/paddle 2.6.0...
Cross site scripting
Cross Site Scripting XSS vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter...