Design/Logic Flaw

An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature...

CVE-2023-38770

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the group parameter within the /QueryView.php...

CVE-2023-37687

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the View Request of Nurse Page in the Admin portal...

CVE-2023-37687

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the View Request of Nurse Page in the Admin portal...

Cross site scripting

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the View Request of Nurse Page in the Admin portal...

CVE-2023-37687

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the View Request of Nurse Page in the Admin portal...

CVE-2023-36344

An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature...

PT-2023-25541 · Diebold Nixdorf · Diebold Nixdorf Vynamic View Console

Name of the Vulnerable Software and Affected Versions: Diebold Nixdorf Vynamic View Console versions 5.3.1 and earlier Description: The issue allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature. This enables the...

Diebold Nixdorf Vynamic View Console Code Issue Vulnerability

The Diebold Nixdorf Vynamic View Console is a system from Diebold Nixdorf that allows remote changes to all PC-based devices via Intel Active Management Technology AMT BIOS management. A security vulnerability exists in Diebold Nixdorf Vynamic View Console v.5.3.1 and prior versions, which...

CVE-2023-36344

An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature...

CVE-2023-36344

Diebold Nixdorf Vynamic View Console (v5.3.1 and earlier) is affected by a DLL search path hijacking issue that allows a local attacker to run arbitrary code by loading unsigned DLLs. The vulnerability affects multiple DLLs (e.g., VERSION.DLL, WINMM.DLL, WSOCK32.DLL, MSVCR100.DLL, USERENV.DLL, an...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the Guest View in the library, which allows an attacker to convince a user to install a malicious extension to potentially exploit heap corruption via a maliciously crafted HTML page...

PT-2023-28167 · Sourcecodester · Sourcecodester Resort Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Resort Reservation System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Resort Reservation System, affecting the file view fee.php. The manipulation of the id argument leads to SQL...

MediaWiki < 1.37.0 Multiple Vulnerabilities

According to its self-reported version number, the instance of MediaWiki hosted on the remote web server is prior to 1.37. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in the handling of theclientURL parameter for the ImportFile page leading to cross site scripting...

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerability exists due to lack of view permissions of trigger tokens which allows an attacker to expose trigger tokens configured on that project...

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerability exists due to lack of view permissions on members which allows an attacker to gain access to the members of private groups...

Improper Authorization

gitlab is vulnerable to Improper Authorization. An attacker can view and delete impersonation tokens that administrators create...

Hospital Management System SQL Injection Vulnerability

A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in the SourceCodester Free Hospital Management System, which originates from an SQL injection...

Resort Reservation System SQL Injection Vulnerability

Resort Reservation System is a Resort Reservation System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in version 1.0 of Resort Reservation System, which can be exploited to perform SQL injection by manipulating the id parameter of the viewfee.php page...

PT-2023-28092 · Unknown · Sourcecodester Free Hospital Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free Hospital Management System for Small Practices version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /vm/doctor/doctors.php?action=view. The manipulation of the id argumen...