Skip to content
OpenAdvisories

Archive

30 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /30 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2024-1522

    Cross-Site Request Forgery (CSRF) Leading to Remote Code Execution in parisneo/lollms-webui

    A Cross-Site Request Forgery (CSRF) vulnerability in the parisneo/lollms-webui project allows remote attackers to execute arbitrary code on a victim's system. The vulnerability stems from the `/execute_code` API endpoint, which does not properly validate requ…

    parisneo parisneo/lollms-webui
  • High 8.8
    CVE-2024-3018

    Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword

    The Essential Addons for Elementor plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.9.13 via deserialization of untrusted input from the 'error_resetpassword' attribute of the "Login | Register Form" widget (d…

    wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets Web / CMS
  • High 7.3
    CVE-2024-3088

    PHPGurukul Emergency Ambulance Hiring Portal Forgot Password Page forgot-password.php sql injection

    A vulnerability, which was classified as critical, was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. This affects an unknown part of the file /admin/forgot-password.php of the component Forgot Password Page. The manipulation of the argument usern…

    PHPGurukul Emergency Ambulance Hiring Portal
  • High 7.3
    CVE-2024-3087

    PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php sql injection

    A vulnerability, which was classified as critical, has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this issue is some unknown functionality of the file ambulance-tracking.php of the component Ambulance Tracking Page. The manipu…

    PHPGurukul Emergency Ambulance Hiring Portal
  • High 7.3
    CVE-2024-3085

    PHPGurukul Emergency Ambulance Hiring Portal Admin Login Page login.php sql injection

    A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql i…

    PHPGurukul Emergency Ambulance Hiring Portal
  • High 8.8
    CVE-2024-2047

    ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw

    The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.6 via the render_raw function. This makes it possible for authenticated attackers, with contributor-level access and above, t…

    roxnor ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor Web / CMS