Cross site scripting

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&classid=1. The manipulation of the argument classdate with the input 2024-02-23%22%3E%3Cscript%3Ealert1%3C/script%3E...

CVE-2024-1834

The CVE-2024-1834 entry describes a cross-site scripting (XSS) vulnerability in SourceCodester Simple Student Attendance System 1.0, affecting an unknown portion of the file at the endpoint ?page=attendance&class_id=1. By manipulating the class_date (examples show 2024-02-23%22%3E%3Cscript%3Ealer...

CVE-2024-1833

CVE-2024-1833 affects SourceCodester Employee Management System 1.0. Affected component: /Account/login.php, where manipulation of the txtusername (and txtphone in some descriptions) enables SQL injection. Exploitation may be remote and exploits have been publicly disclosed. Multiple trusted sour...

CVE-2024-1832

The CVE-2024-1832 entry concerns SourceCodester Complete File Management System 1.0, where the Admin Login Form’s /admin/ functionality is vulnerable to SQL injection via the username parameter (example payload shown in sources). The root cause is an injectable username input that allows remote e...

CVE-2022-43842

IBM Aspera Console 3.4.0–3.4.2 are affected by an SQL injection due to lack of validation of externally entered SQL statements, enabling a remote attacker to view, add, modify, or delete data in the back-end database. The issue affects IBM Aspera Console versions 3.4.0 through 3.4.2, and the reco...

Sql injection

A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injectio...

Out-of-bounds

Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNXASSERT and ONNXASSERTM functions have an off by one string copy...

Sql injection

A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. Affected is an unknown function of the file Source/librarian/user/teacher/registration.php. The manipulation of the argument email/idno/phone/username leads to sql injection. It is possible to launc...

CVE-2024-1829

CVE-2024-1829 affects code-projects Library System 1.0. The vulnerability is in Source/librarian/user/student/registration.php where manipulation of email, regno, phone, or username leads to SQL injection. It is remote, with the exploit disclosed publicly. Affected CVSS metrics include a high/cri...

CVE-2024-27319

CVE-2024-27319 affects the ONNX package: versions 1.15.0 and earlier are vulnerable due to an off-by-one string copy in ONNX_ASSERT/ONNX_ASSERTM, causing an out-of-bounds read. Connected advisories confirm the issue across multiple platforms and note remediation by upgrading ONNX (e.g., IBM’s adv...

CVE-2024-27318

CVE-2024-27318 affects the ONNX package: versions up to and including 1.15.0 are vulnerable to a Directory Traversal in the external_data field of the tensor proto, which can reference files outside the model directory or user-provided directory. The issue is described as a bypass of the patch fo...

CVE-2024-1827

CVE-2024-1827 affects code-projects Library System 1.0. The vulnerability resides in the login path (Source/librarian/user/teacher/login.php) where manipulating the username and password parameters leads to an SQL injection. The issue is exploitable remotely and, per available sources, the exploi...

CVE-2103-2929

CVE-2013-2929 is a Linux kernel flaw in the get_dumpable() function of the ptrace subsystem that could lead to information disclosure on systems where fs.suid_dumpable is set non-default. Debian lists this CVE among many in DSA-2906-1 and notes a fixed package for oldstable (2.6.32-48squeeze5). A...

Hardcoded credentials

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks...

CVE-2024-1826

The CVE-2024-1826 entry affects code-projects Library System 1.0, specifically the file Source/librarian/user/student/login.php. The vulnerability arises from improper handling of the username and password parameters, allowing SQL injection. The attack can be initiated remotely and, according to ...

CVE-2024-1825

CVE-2024-1825 affects CodeAstro House Rental Management System 1.0, specifically the User Registration Page. The issue is a cross-site scripting (XSS) vulnerability caused by manipulating the address parameter with input like , which can be exploited remotely. The vulnerability is publicly disclo...

Sql injection

A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file policeadd.php. The manipulation of the argument policename/policeid/policespec/password leads to sql injection. The exploit has been disclos...

Sql injection

A vulnerability was found in code-projects Crime Reporting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file inchargelogin.php. The manipulation of the argument email/password leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2024-1824

CVE-2024-1824 affects CodeAstro House Rental Management System 1.0. The vulnerability is in the signing.php file where manipulation of the uname/password parameters enables SQL injection. Exploitation is network-based and can be attempted remotely; multiple sources note the vulnerability and publ...

CVE-2024-26150

CVE-2024-26150 affects @backstage/backend-common prior to versions 0.21.1, 0.20.2, and 0.19.10, where path checks in resolveSafeChildPath were not exhaustive, enabling potential path traversal if symlinks are injected. The issue is publicly documented across multiple sources (NVD, GHSA advisory, ...