by Kastro CVE-2024-0264 · SourceCodester Clinic Queuing System
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 493 of 784
SourceCodester
mitre
CVE-2024-22087 · mitre
route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote cod…
CVE-2024-22086 · mitre
handle_request in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code execu…
CVE-2023-51277 · mitre
nbviewer-app (aka Jupyter Notebook Viewer) before 0.1.6 has the get-task-allow entitlement for release builds.
CVE-2023-50027 · mitre
SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and before, allows remote attacker…
CVE-2024-22088 · mitre
Lotos WebServer through 0.1.1 (commit 3eb36cc) has a use-after-free in buffer_avail() at buffer.h via a long URI, because realloc is mish…
CVE-2023-51154 · mitre
Jizhicms v2.5 was discovered to contain an arbitrary file download vulnerability via the component /admin/c/PluginsController.php.
CVE-2023-46953 · mitre
SQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute arbitrary code via the d parameter in the Documents mo…
CVE-2020-13878 · mitre
IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+27ef heap-based out-of-bounds write.
CVE-2020-13879 · mitre
IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+214f heap-based out-of-bounds write.
CVE-2020-13880 · mitre
IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+1cbf heap-based out-of-bounds write.
PaddlePaddle
CVE-2023-52310 · PaddlePaddle PaddlePaddle
Command injection in get_online_pass_interval
CVE-2023-52311 · PaddlePaddle PaddlePaddle
Command injection in _wget_download
CVE-2023-52314 · PaddlePaddle PaddlePaddle
Command injection in convert_shape_compare
CVE-2023-52304 · PaddlePaddle PaddlePaddle
Stack overflow in paddle.searchsorted
CVE-2023-52307 · PaddlePaddle PaddlePaddle
Stack overflow in paddle.linalg.lu_unpack
CVE-2023-52309 · PaddlePaddle PaddlePaddle
Heap buffer overflow in paddle.repeat_interleave
Kashipara
CVE-2024-0268 · Kashipara Hospital Management System
Kashipara Hospital Management System registration.php sql injection
CVE-2024-0267 · Kashipara Hospital Management System
Kashipara Hospital Management System Parameter login.php sql injection
tenda
CodeAstro
CVE-2024-0247 · CodeAstro Online Food Ordering System
CodeAstro Online Food Ordering System Admin Panel sql injection
Kashipara Group
CVE-2023-50743 · Kashipara Group Online Notice Board System
Online Notice Board System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-50753 · Kashipara Group Online Notice Board System
Online Notice Board System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-50866 · Kashipara Group Travel Website
Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-49666 · Kashipara Group Billing Software
Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-49622 · Kashipara Group Billing Software
Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-49624 · Kashipara Group Billing Software
Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-49625 · Kashipara Group Billing Software
Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-49633 · Kashipara Group Billing Software
Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-49639 · Kashipara Group Billing Software
Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-49658 · Kashipara Group Billing Software
Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-49665 · Kashipara Group Billing Software
Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-50752 · Kashipara Group Online Notice Board System
Online Notice Board System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-50862 · Kashipara Group Travel Website
Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-50863 · Kashipara Group Travel Website
Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-50864 · Kashipara Group Travel Website
Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-50865 · Kashipara Group Travel Website
Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-50867 · Kashipara Group Travel Website
Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Apache Software Foundation
CVE-2023-51784 · Apache Software Foundation Apache InLong
Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager
HCL Software
CVE-2023-45723 · HCL Software DRYiCE MyXalytics
Path Traversal which allows file upload capability affects DRYiCE MyXalytics
CVE-2023-45722 · HCL Software DRYiCE MyXalytics
Path Traversal Arbitrary File Read affects DRYiCE MyXalytics
CVE-2023-45724 · HCL Software DRYiCE MyXalytics
Unauthenticated File Upload affects DRYiCE MyXalytics
JS Help Desk
CVE-2022-46839 · JS Help Desk JS Help Desk – Best Help Desk & Support Plugin
WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload
WooCommerce
CVE-2023-51502 · WooCommerce WooCommerce Stripe Payment Gateway
WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)
cubefs
Designful
CVE-2023-51673 · Designful Stylish Price List – Price Table Builder & QR Code Restaurant Menu