Code-Projects Cinema Seat Reservation System 注入漏洞

Code-Projects Cinema Seat Reservation System is a Code-Projects open source movie theater seat reservation system. An injection vulnerability exists in Code-Projects Cinema Seat Reservation System version 1.0, which is caused by an SQL injection into the parameter id...

WordPress plugin Bus Ticket Booking with Seat Reservation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin Bus Ticket Booking with Seat Reservation versions = 5.4.3...

CVE-2023-47647

CVE-2023-47647 corresponds to a Missing Authorization (Broken Access Control) vulnerability in LearningTimes BadgeOS, affecting BadgeOS up to version 3.7.1.6. The issue originates from misconfigured access control levels, enabling unauthorized actions. Reported CVSS 3.1 base score 4.3 (Medium). C...

CVE-2023-47515

CVE-2023-47515 concerns the WordPress plugin “Seers – GDPR & CCPA Cookie Consent & Compliance”. Connected sources confirm a Missing Authorization/Broken Access Control issue affecting Seers versions up to 8.1.1, allowing unauthenticated access to configured security levels. The root cause is insu...

CVE-2023-45636

CVE-2023-45636 concerns the WordPress plugin WordPress Backup & Migration (wp-migration-duplicator)

PT-2026-26112

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where data reservation was incorrectly freed during fallback from inline extent creation due to an -ENOSPC error. This occurred when failing to create ...

PT-2026-26111

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to a reservation leak within the btrfs file system when inserting inline extents. Specifically, if allocation of a path or joining a transaction...

Cisco IOS Software Resource Reservation Protocol DoS (cisco-sa-rsvp-dos-OypvgVZf)

According to its self-reported version, Cisco IOS is affected by a vulnerability. - A vulnerability in the Resource Reservation Protocol RSVP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly,...

Cisco IOS XE Software Resource Reservation Protocol DoS (cisco-sa-rsvp-dos-OypvgVZf)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Resource Reservation Protocol RSVP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload...

SUSE CVE-2024-56706

In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Fix and protect memory allocation of SDBs with mutex Reservation of the PMU hardware is done at first event creation and is protected by a pair of mutexlock and mutexunlock. After reservation of the PMU hardware the...

CVE-2022-21505

CVE-2022-21505: In the Linux kernel IMA, enabling appraisal with ima_appraise=log can bypass lockdown on systems where Secure Boot is disabled or unavailable. IMA blocks ima_appraise=log via boot params when Secure Boot is enabled, but this protection does not cover lockdown used without Secure B...

CVE-2022-33954

IBM Robotic Process Automation (RPA) versions 21.0.1–21.0.3 are affected by CVE-2022-33954 due to insufficient protection of credentials, allowing a user with physical access to obtain sensitive information. The vulnerability stems from weak credential protection mechanisms and can lead to inform...

CVE-2022-44512

Adobe Acrobat Reader DC is affected by out-of-bounds write (CWE-787) in parsing that could lead to arbitrary code execution in the current user context. Affected versions include 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. Exploitation requires user interacti...

CVE-2023-36510

Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReDi Restaurant Reservation: from n/a through 23.0211...

CVE-2023-36510

Missing Authorization vulnerability in catkin ReDi Restaurant Reservation redi-restaurant-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReDi Restaurant Reservation: from n/a through = 23.0211...

CVE-2023-41873

CVE-2023-41873 targets the WordPress plugin “miniOrange SAML SP Single Sign On.” The issue is a Missing Authorization vulnerability (Broken Access Control) in the plugin’s access checks, allowing exploitation of misconfigured security levels for SAML SSO. Affected: versions up to 5.0.4 (from n/a ...

CVE-2023-36510 WordPress ReDi Restaurant Reservation plugin <= 23.0211 - Broken Access Control vulnerability

Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReDi Restaurant Reservation: from n/a through 23.0211...

CVE-2023-36510

CVE-2023-36510 is a WordPress plugin issue in ReDi Restaurant Reservation (

CVE-2023-36510 WordPress ReDi Restaurant Reservation plugin <= 23.0211 - Broken Access Control vulnerability

Missing Authorization vulnerability in catkin ReDi Restaurant Reservation redi-restaurant-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReDi Restaurant Reservation: from n/a through = 23.0211...