Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 409,793
- Last 24h
- 342
- Critical, 7 days
- 340
- Known exploited
- 1,779
12,767 results · Clear filters · Feed
-
Low 3.5
A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System Project 1.0 via the userna…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 …
-
Low 3.5
A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the use…
-
Low 3.5
A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstnam…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning Management System Project 1.0…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.…
-
Low 3.5
A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Project 1.0…
-
Low 3.8
Protection mechanism failure in the SPP for some Intel(R) Xeon(R) processor family (E-Core) may allow an authenticated …
-
Low 3.4
Improper input validation for some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.60 may allow a …
-
Low 3.9
Out-of-bounds read for some OpenCL(TM) software may allow an authenticated user to potentially enable denial of service…
-
Low 3.9
Improper Input Validation in some Intel(R) VROC software before version 8.6.0.2003 may allow an authenticated user to p…
-
Low 2.2
NULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potenti…
-
Low 2.2
Out-of-bounds read in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially e…
-
Low 3.4
Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before ver…
-
Low 3.8
Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may allow an authenticated u…
-
Low 3.5
Public CMS Voting Management save cross site scripting
A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown processing of the file /admin/cmsVote/save of the component Voting Management. The manipulation leads to cross site scripting. The attack may be …
-
Low —
paillier-zk has ambiguous challenge derivation
Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).
-
Low —
cggmp21 vulnerable to ambiguous challenge derivation
Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).
-
Low —
cggmp21-keygen has ambiguous challenge derivation
Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).
-
Low —
`fast-float` has multiple soundness issues
`fast-float` contains multiple soundness issues: 1. [Undefined behavior when checking input length](https://github.com/aldanor/fast-float-rust/issues/28), which has been merged but no package [pubished](https://github.com/aldanor/fast-float-rust/issues/35). 1…
-
Low 3.8
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb versi…
-
Low 2.2
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet Fo…
-
Low 3.9
An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAna…
-
Low 3.6
An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CW…
-
Low 2.7
DedeCMS friendlink_add.php unrestricted upload
A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_add.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the …
-
Low 3.5
Element's thumbnails can be abused to misrepresent the content of an attachment
Element is a Matrix web client built using the Matrix React SDK. Versions of Element Web and Desktop earlier than 1.11.85 do not check if thumbnails for attachments, stickers and images are coherent. It is possible to add thumbnails to events trigger a file d…
-
Low 2.4
ZZCMS msg.php cross site scripting
A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/msg.php. The manipulation of the argument keyword leads to cross site scripting. The attack may be launche…
-
Low 3.1
Digistar AG-30 Plus Login Page excessive authentication
A vulnerability was found in Digistar AG-30 Plus 2.6b. It has been classified as problematic. Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of excessive authentication attempts. The complexity of a…
-
Low 3.1
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCO…
-
Low 3.5
Exposure of sensitive system information to an unauthorized control sphere issue exists in Mesh Wi-Fi router RP562B fir…
-
Low 3.5
SourceCodester Hospital Management System edit-doc.php cross site scripting
A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site s…
-
Low 3.3
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a Files or Directories Ac…
-
Low 2.7
Multiple Page Generator Plugin – MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion
The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the mpg_upsert_project_source_block() function in all versions up to, and including, 4.0.2. This makes it possib…
-
Low 3.3
SourceCodester Student Record Management System Main Menu infinite loop
A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requiremen…
-
Low 3.5
Missing authorization check in SAP Cash Management (Cash Operations)
Cash Operations does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges causing low impact to confidentiality to the application.
-
Low 3.5
code-projects Job Recruitment register.php cross site scripting
A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument e/role leads to cross site scripting. The…
-
Low 2.0
Self Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDF
Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. In affected versions the Merge functionality takes untrusted user input (file name) and uses it directly in the creation of HTML pages allowing any un…
-
Low 3.7
Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength
In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.
-
Low 3.5
Sanluan PublicCMS Tag Type save cross site scripting
A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS 5.202406.d. This issue affects some unknown processing of the file /admin/cmsTagType/save of the component Tag Type Handler. The manipulation of the argument name leads …
-
Low 3.3
Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products ar…