All CVEs — page 383 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A SQL Injection vulnerability in Liquid Web / StellarWP Event Tickets allows Blind SQL Injection, which can be exploited to extract data from the database.
This vulnerability allows unauthenticated users to bypass OAuth Single Sign-On (SSO) authentication, potentially gaining unauthorized access to protected resources.
The flaw is an unauthenticated PHP Object Injection vulnerability in Booking Activities versions up to 1.18.7.1, allowing attackers to inject arbitrary PHP objects and potentially execute arbitrary code or cause a denial of service.
A path traversal vulnerability in Creator LMS allows contributors to access arbitrary files on the server by manipulating file paths in their submissions. This flaw enables attackers to read sensitive data, potentially including configuration files and user credentials.