16963 matches found
GHSA-PHG7-8MM9-GJ88 EGroupware mishandles an ORDER BY clause
EGroupware before 23.1.20240624 mishandles an ORDER BY clause. This leads to json.php menuaction=EGroupware\Api\Etemplate\Widget\Nextmatch::ajaxgetrows sort.id SQL injection by authenticated users for Address Book or InfoLog sorting...
CGA-GPWC-7F5F-8M65
Bulletin has no description...
CGA-VC2M-GVQX-PVQX
Bulletin has no description...
BELL-CVE-2024-39474
Bulletin has no description...
CVE-2024-27713
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component...
CVE-2024-39174
A cross-site scripting XSS vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article...
PT-2024-27738 · 14Finger · 14Finger
Name of the Vulnerable Software and Affected Versions: 14Finger version 1.1 Description: Insecure permissions in the component "/api/admin/user" of 14Finger allow attackers to access all user information via a crafted GET request. The username and other sensitive information can be accessed throu...
CGA-X8CH-7XR6-V7P8
Bulletin has no description...
CGA-QMJV-7R35-XW92
Bulletin has no description...
CGA-JJQ8-CGX4-958M
Bulletin has no description...
CGA-CFCC-MP7X-G5P9
Bulletin has no description...
CGA-7V5M-29GM-44RR
Bulletin has no description...
CGA-8V46-6HFH-FJ75
Bulletin has no description...
CGA-6924-FRH9-HJJ5
Bulletin has no description...
CGA-43PF-P965-XFGH
Bulletin has no description...
CGA-WMW5-G5QR-5C95
Bulletin has no description...
CGA-JMCW-QXVV-R45J
Bulletin has no description...
CGA-JP43-P8GG-QHX2
Bulletin has no description...