Skip to content
OpenAdvisories

Archive

March 2024

Vulnerabilities first published in this month (UTC), newest first.

46 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-2057 Public exploit

    LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery

    A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation …

  • Medium 6.1
    CVE-2023-49539 Public exploit

    Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/inde…

  • Medium 6.1
    CVE-2023-49540 Public exploit

    Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/inde…

  • Medium 4.9
    CVE-2023-49544 Public exploit

    A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unau…

  • Medium 6.1
    CVE-2024-27743 Public exploit

    Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code…

  • Medium 6.1
    CVE-2024-27744 Public exploit

    Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code…