CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- cxbsoft url-shortingCXBSoft Url-shorting HTTP POST Request long_s_short.php sql injection5.5 Medium
- cxbsoft url-shortingCXBSoft Url-shorting index.php sql injection5.5 Medium
- cmseasyCmsEasy language_admin.php getslide_child_action sql injection6.3 Medium
- allegro rompagerAllegro RomPager HTTP POST Request cross-site request forgery4.3 Medium
- haokekeji yiqiniuHaoKeKeJi YiQiNiu Api.php http_post server-side request forgery7.3 High
- zhongfucheng3y austinZhongFuCheng3y Austin Upload Material Menu MaterialController.java getFile unrestricted upload5.5 Medium
- code-projects simple online hotel reservation systemcode-projects Simple Online Hotel Reservation System Make a Reservation Page add_reserve.php cross site scripting3.5 Low
- code-projects online fir systemcode-projects Online FIR System registercomplaint.php cross site scripting3.5 Low
- oretnom23 house rental management systemSourceCodester House Rental Management System Edit User manage_user.php sql injection4.7 Medium
- oretnom23 house rental management systemSourceCodester House Rental Management System Manage Invoice Details cross site scripting2.4 Low
- oretnom23 house rental management systemSourceCodester House Rental Management System Manage Tenant Details cross site scripting2.4 Low
- oretnom23 house rental management systemSourceCodester House Rental Management System index.php cross site scripting2.4 Low
- project worlds lawyer management system, projectworlds online lawyer management system +1 moreProject Worlds Lawyer Management System searchLawyer.php sql injection6.3 Medium
- campcodes student information system, simple student information system +1 moreCampcodes Student Information System sql injection6.3 Medium
- kashipara billing softwareKashipara Billing Software HTTP POST Request item_list_edit.php sql injection6.3 Medium
- kashipara billing softwareKashipara Billing Software HTTP POST Request party_submit.php sql injection6.3 Medium
- kashipara billing softwareKashipara Billing Software HTTP POST Request material_bill.php sql injection6.3 Medium
- kashipara billing softwareKashipara Billing Software HTTP POST Request submit_delivery_list.php sql injection6.3 Medium
- kashipara billing softwareKashipara Billing Software HTTP POST Request buyer_detail_submit.php sql injection6.3 Medium
- aureus erp, huaxiaerp huaxia erp +1 moreHuaxia ERP UserController.java password recovery5.3 Medium
- aureus erp, huaxiaerp huaxia erp +1 moreHuaxia ERP getAllList information disclosure5.3 Medium
- code-projects fighting cock information systemcode-projects Fighting Cock Information System edit_chicken.php sql injection6.3 Medium
- code-projects fighting cock information systemcode-projects Fighting Cock Information System new-feed.php sql injection6.3 Medium
- code-projects fighting cock information systemcode-projects Fighting Cock Information System delete-vaccine.php sql injection6.3 Medium
- code-projects fighting cock information systemcode-projects Fighting Cock Information System add_con.php sql injection6.3 Medium
ferris-sayscrates.ioferris-says has undefined behavior when not using UTF-8No score- code-projects fighting cock information systemcode-projects Fighting Cock Information System add_con.php sql injection6.3 Medium
- code-projects fighting cock information systemcode-projects Fighting Cock Information System update_mother.php sql injection6.3 Medium
- jifeer taokeyunTaokeyun HTTP POST Request Task.php index sql injection6.3 Medium
- jifeer taokeyunTaokeyun HTTP POST Request Video.php index sql injection6.3 Medium
- jifeer taokeyunTaokeyun HTTP POST Request Goods.php shopGoods sql injection6.3 Medium
- edx edx-platformXBlock custom auth does not respect JWT Scopes6.4 Medium
- chromiumembedded cef, chromium embedded framework +1 moreOOB Access in CefVideoConsumerOSR::OnFrameCaptured5.4 Medium
- advanced-woo-search advanced woo search, mihail-barinov advanced woo search – product search for woocommerce +1 moreAdvanced Woo Search <= 2.96 - Reflected Cross-Site Scripting6.1 Medium
- jifeer taokeyunTaokeyun HTTP POST Request Drs.php index sql injection7.3 High
- jifeer taokeyunTaokeyun HTTP POST Request User.php login sql injection7.3 High
- code-projects fighting cock information systemcode-projects Fighting Cock Information System edit_chicken.php sql injection6.3 Medium
- code-projects fighting cock information systemcode-projects Fighting Cock Information System update-deworm.php sql injection6.3 Medium
- phpgurukul blood bank \& donor management systemBlood Bank & Donor Management request-received-bydonar.php cross site scripting2.4 Low
- code-projects dormitory management systemcode-projects Dormitory Management System modifyuser.php sql injection6.3 Medium
- sujeetkv flaskcodePath traversal in flaskcode7.5 High
- sujeetkv flaskcodePath traversal in flaskcode7.5 High
- tduckcloud tduck-platformSQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain...6.5 Medium
- rymcu forestAn issue in rymcu forest v.0.02 allows a remote attacker to obtain sensitive information via...7.5 High
- qstar archive storage managerAn access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows...6.5 Medium
- qstar archive storage managerAn access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows...7.5 High
- qstar archive storage managerAn authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions...5.4 Medium
- qstar archive storage managerAn unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions...6.1 Medium
- qstar archive storage managerAn authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3...8.8 High
- qstar archive storage managerIncorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows...7.5 High
- Show moreLoading…