Archive
20 September 2024
Vulnerabilities first published on this day (UTC), newest first.
14 results · Clear filters · Feed
-
Medium 4.8
Cross-site Scripting from in Confidant API call
Confidant is a open source secret management service that provides user-friendly storage and access to secrets. The following endpoints are subject to a cross site scripting vulnerability: GET /v1/credentials, GET /v1/credentials/, GET /v1/archive/credentials…
-
Medium 6.5
Possible Data Tampering & Loss of Public Datasets in Galaxy
Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. An attacker can potentially replace the contents of public datasets resulting in data loss or tampering.…
-
Medium 6.6
The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen…
-
Medium 6.3
SourceCodester Best House Rental Management System ajax.php sql injection
A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=update_account. The manipulation of the argument firstname/lastname/email…
-
Medium 4.3
Codezips Online Shopping Portal insert-product.php unrestricted upload
A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 l…
-
Medium 6.3
itsourcecode Online Bookstore admin_add.php unrestricted upload
A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin_add.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiat…
-
Medium 6.3
SourceCodester Simple Forum-Discussion System index.php path traversal
A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to path traversal. It is possible to launch …
-
Medium 6.3
code-projects Crud Operation System updata.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Crud Operation System 1.0. Affected is an unknown function of the file updata.php. The manipulation of the argument sid leads to sql injection. It is possible to launch the attack r…
-
Medium 6.5
eNMS up to 4.7.1 is vulnerable to Directory Traversal via /download/file.
-
Medium 4.8
A stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows a…
-
Medium 6.5
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via edit_file.
-
Medium 6.5
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via upload_files.
-
Medium 6.1
Cross Site Scripting vulnerability in Leotheme Leo Product Search Module v.2.1.6 and earlier allows a remote attacker t…
-
Medium 4.8
Improper input validation in /admin/config/save in User-friendly SVN (USVN) before v1.0.12 and below allows administrat…