CVE-2014-0468

CVE-2014-0468 affects FusionForge prior to 5.3+20140506, due to a misconfigured Apache setup that allows the web server to execute scripts uploaded by users in raw SCM repositories (SVN, Git, Bzr...). This mode C summary uses concrete details from connected sources: affected product/component (Fu...

CVE-2021-41691

CVE-2021-41691 affects the OS4Ed Open Source Information System Community (openSIS) v8.0. The vulnerability is a SQL injection in the POST endpoint "/TransferredOutModal.php" triggered by the parameters student_id and TRANSFER[SCHOOL] (notably in the path and parameter naming variants such as TRA...

CVE-2024-4025

CVE-2024-4025 describes a DoS in GitLab CE/EE across all versions up to fixed points: 7.10–16.11.4, 17.0 prior to 17.0.3, and 17.1 prior to 17.1.1, triggered by processing a crafted Markdown page. The issue's impact is high (availability loss) per CVSS; no exploitation details are provided in the...

CVE-2024-3062

The CVE-2024-3062 entry concerns the WordPress plugin Save as Image by Pdfcrowd (pre-3.2.2). It documents that certain settings are not sanitised/escaped, enabling Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (such as in multisite setups). Affected com...

CVE-2024-0970

CVE-2024-0970 concerns the WordPress plugin User Activity Tracking and Log (pre-4.1.4). The vulnerability stems from retrieving client IP addresses from untrusted headers, enabling an attacker to spoof/manipulate the logged IP address in activity logs. Public sources in the connected data confirm...

CVE-2024-0249

CVE-2024-0249 affects the WordPress plugin Advanced Schedule Posts (versions ≤ 2.1.8). The vulnerability is a Reflected Cross‑Site Scripting (XSS) caused by not sanitising/escaping a parameter before echoing it on the page, which could impact high‑privilege users (e.g., admins). Exploitation stat...

CVE-2023-7197

CVE-2023-7197 affects Marketing Twitter Bot WordPress plugin (

CVE-2023-6783

CVE-2023-6783 concerns the WolfNet IDX for WordPress plugin (

CVE-2023-6541

The CVE-2023-6541 entry concerns the WordPress Allow SVG plugin prior to 1.2.0, where uploaded SVGs are not sanitized, enabling stored XSS via SVG payloads uploaded by users with as little as Author privileges. Impact is cross-site scripting with low to moderate severity per sources; remediation:...

CVE-2023-5932

The CVE-2023-5932 issue concerns the WordPress plugin Travelpayouts: All Travel Brands in One Place, affected in versions prior to 1.1.14. The root cause is that a parameter is not properly sanitized/escaped before being echoed back in the page, enabling a Reflected Cross-Site Scripting (XSS) att...

CVE-2022-21546

CVE-2022-21546 is a Linux kernel vulnerability affecting the SCSI target path. The issue arises in target_core_iblock/file when handling WRITE_SAME commands if the NDOB bit is set (NDOB indicates no data buffer) or when zero SG elements are sent. The kernel patch adds a common WRITE_SAME check fo...

CVE-2025-3333

A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/menuupdate.php. The manipulation of the argument menu leads to sql injection. The attack can be launched...

CVE-2024-4877

OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges...

CVE-2022-1804

Summary: CVE-2022-1804 affects AccountsService. Local attackers could exploit a flaw where AccountsService incorrectly drops privileges when handling .pam_environment, potentially causing the service to crash or become unresponsive (denial of service). Affected components: AccountsService (Linux/...

CVE-2023-25610

Fortinet CVE-2023-25610 is a buffer underwrite in the FortiOS/FortiProxy administrative interface that allows remote, unauthenticated execution of code via crafted requests. Affected firmware ranges include FortiOS 7.2.0–7.2.3, 7.0.0–7.0.6, 6.4.0–6.4.11, 6.2.12 and below, FortiProxy 7.2.0–7.2.2, ...

CVE-2021-22126

CVE-2021-22126 relates to Fortinet FortiWLC and is a hard-coded password vulnerability. A local, authenticated attacker could connect to the managed APs (Meru AP and FortiAP-U) as root using the default hard-coded username and password. Affected FortiWLC versions are 8.5.2 and below, 8.4.8 and be...

CVE-2022-31631

In PHP versions 8.0. before 8.0.27, 8.1. before 8.1.15, 8.2. before 8.2.2 when using PDO::quote function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities...

CVE-2022-31631

CVE-2022-31631 affects PHP versions where PDO::quote() on SQLite can misquote long input, enabling potential SQL injection. Affected: PHP 8.0.x before 8.0.27, 8.1.x before 8.1.15, and 8.2.x before 8.2.2. The issue stems from incorrect quoting in the SQLite path, as documented in multiple advisori...

CVE-2024-3976

CVE-2024-3976 affects GitLab CE/EE, with an issue that allowed disclosure of the title and description of confidential issues from public projects to unauthorized users via the UI. Impacted versions are: 14.0–16.9.7, 16.10–16.10.5, and 16.11–16.11.2. The root cause is described as missing/incorre...

CVE-2023-6386

GitLab CE/EE is affected by CVE-2023-6386. A denial-of-service arises from allocation of resources without limits/throttling, impacting all versions 15.11 up to but not including 16.6.7, 16.7 up to but not including 16.7.5, and 16.8 up to but not including 16.8.2. Remediation is to upgrade to fix...