7414 matches found
PT-2024-13036
Name of the Vulnerable Software and Affected Versions Code-Projects Exam Form Submission version 1.0 Description A Cross Site Scripting XSS issue affects the software, allowing attackers to execute arbitrary code through the Subject Name and Subject Code sections. This enables attackers to run...
CVE-2023-42307
Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...
CVE-2024-24093
The Code-projects Scholars Tracking System version 1.0 is vulnerable to a SQL Injection flaw. An attacker can send specially crafted SQL statements via the Personal Information Update information/messages, potentially leading to unauthorized access and data manipulation or allowing the execution ...
Improper Access Control
GitLab is vulnerable to Improper Access Control. The vulnerability is due to improper authorization in GitLab. Group members with sub-maintainer roles were able to change the title of privately accessible deploy keys associated with projects in the group, which they should not have permission to...
Fedora: Security Advisory for maven-remote-resources-plugin (FEDORA-2024-129d8ca6fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: modulemaker-maven-plugin-1.11-1.fc40
This plugin allows the creation of a module-info.class for projects on Java 6 to Java 8 where a module-info.java file cannot be compiled...
[SECURITY] Fedora 40 Update: libbase-1.1.3-42.fc40
LibBase is a library developed to provide base services like logging, configuration and initialization to other libraries and applications. The library is the root library for all Pentaho-Reporting projects...
[SECURITY] Fedora 40 Update: jdeparser-2.0.3-17.fc40
This project is a fork of Sun's now Oracle's com.sun.codemodel project. We decided to fork the project because by all evidence, the upstream project is dead and not actively accepting outside contribution. All JBoss projects are urged to use this project instead for source code generation...
[SECURITY] Fedora 40 Update: jaxb-istack-commons-4.2.0-8.fc40
Code shared between JAXP, JAXB, SAAJ, and JAX-WS projects...
[SECURITY] Fedora 40 Update: fusesource-pom-1.12-18.fc40
This is a shared POM parent for FuseSource Maven projects...
[SECURITY] Fedora 40 Update: auto-1.6.1-10.fc40
The Auto sub-projects are a collection of code generators that automate those types of tasks...
[SECURITY] Fedora 40 Update: apache-parent-31-5.fc40
This package contains the parent pom file for apache projects...
[SECURITY] Fedora 40 Update: apache-commons-digester-2.1-30.fc40
Many projects read XML configuration files to provide initialization of various Java objects within the system. There are several ways of doing this, and the Digester component was designed to provide a common implementation that can be used in many different projects...
CVE-2023-41014
code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."...
CVE-2023-41015
The code-projects.org Online Job Portal version 1.0 is vulnerable to SQL Injection via the /Employer/DeleteJob.php?JobId=1 API endpoint. The vulnerability exists because the JobId variable is improperly neutralized, potentially allowing unauthorized access to and manipulation of data. No official...
PT-2024-12915 · Unknown · Code-Projects.Org Online Job Portal
Name of the Vulnerable Software and Affected Versions: code-projects.org Online Job Portal version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the "/Employer/DeleteJob.php?JobId=1" API endpoint, specifically through the JobId variable. This allows for potential...
BIT-GITLAB-2020-13270
Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API...
BIT-GITLAB-2020-13358
A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access to private projects. Affected versions are: =13.4, =13.3, =13.5, 13.5.2...
BIT-GITLAB-2020-26406
Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3. This information was exposed through GraphQL to non-members of public projects with repository visibility restricted as well as guest members on private projects. Affected versions are:...