Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
M Improper Restriction of Excessive Authentication Attempts	tribe29/checkmk [,2.3.0b5)	Unmanaged (C/C++)	24 Apr 2024
C Improper Input Validation	moodle/moodle >=3.9.0, <3.9.15 >=3.11.0, <3.11.8 >=4.0.0, <4.0.2	Composer	24 Apr 2024
H Cross-Site Request Forgery (CSRF)	mautic/core >=1.4.1	Composer	24 Apr 2024
C Server-Side Request Forgery (SSRF)	moodle/moodle >=3.1.0, <3.1.16	Composer	24 Apr 2024
M Cross-site Scripting (XSS)	web-feet/coastercms >=0.0.0	Composer	24 Apr 2024
M Cross-site Scripting (XSS)	opencart/opencart >=0.0.0	Composer	24 Apr 2024
M Improper Control of Generation of Code ('Code Injection')	dapphp/securimage <3.6.6	Composer	24 Apr 2024
C Improper Control of Generation of Code ('Code Injection')	elefant/cms <2.2.7	Composer	24 Apr 2024
C SQL Injection	zendframework/zendframework1 <1.12.16	Composer	24 Apr 2024
H Sensitive Cookie in Web Application Without 'HttpOnly' Flag	mautic/core <2.1.1	Composer	24 Apr 2024
M Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	opencart/opencart >=0.0.0	Composer	24 Apr 2024
M Cross-site Scripting (XSS)	mautic/core <2.14.2	Composer	24 Apr 2024
M Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	bolt/bolt >=0.0.0	Composer	24 Apr 2024
C Code Injection	PX4/PX4-Autopilot [,1.14)	Unmanaged (C/C++)	24 Apr 2024
M Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	nzedb/nzedb <0.8.0.0	Composer	24 Apr 2024
M Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	opencart/opencart >=0.0.0	Composer	24 Apr 2024
H NULL Pointer Dereference	bellard/quickjs [0,]	Unmanaged (C/C++)	24 Apr 2024
M Cross-site Scripting (XSS)	hydra [0,]	Unmanaged (C/C++)	24 Apr 2024
H Heap-based Buffer Overflow	nanomq/nanomq [,0.21.9)	Unmanaged (C/C++)	24 Apr 2024
M Access Control Bypass	PX4/PX4-Autopilot [,1.15.0-beta1)	Unmanaged (C/C++)	24 Apr 2024
M Out-of-bounds Read	freerdp/freerdp [,3.5.1)	Unmanaged (C/C++)	24 Apr 2024
M Cross-site Scripting (XSS)	bolt/bolt >=0.0.0	Composer	24 Apr 2024
H NULL Pointer Dereference	freerdp/freerdp [,3.5.1)	Unmanaged (C/C++)	24 Apr 2024
H Allocation of Resources Without Limits or Throttling	freerdp/freerdp [,3.5.1)	Unmanaged (C/C++)	24 Apr 2024
M Out-of-bounds Read	freerdp/freerdp [,3.5.1)	Unmanaged (C/C++)	24 Apr 2024
H Prototype Pollution	@conform-to/zod <1.1.1	npm	24 Apr 2024
H Prototype Pollution	@conform-to/yup <1.1.1	npm	24 Apr 2024
H Prototype Pollution	@conform-to/dom <1.1.1	npm	24 Apr 2024
M Cross-site Scripting (XSS)	drupal/core <8.8.10 >=8.9.0, <8.9.6 >=9.0.0, <9.0.6	Composer	24 Apr 2024
M Improper Access Control	automattic/jetpack <9.8	Composer	24 Apr 2024

APPLICATION

OPERATING SYSTEM