CVE Vulnerability Catalog

In the Contacts service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.

In the vowifi service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.

In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.

In the Contacts service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.

In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.

In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.

In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.

A critical vulnerability has been found in SourceCodester Resort Reservation System version 1.0. Manipulation of the 'id' argument in the view_fee.php file leads to SQL injection, which can be exploited remotely.

A critical vulnerability was found in SourceCodester Resort Reservation System version 1.0. Manipulation of the 'id' argument in the manage_user.php file leads to SQL injection, which can be executed remotely.

A critical vulnerability has been found in SourceCodester Resort Reservation System version 1.0. Manipulation of the 'page' argument in the index.php file leads to file inclusion, which can be exploited remotely.

A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository cockpit-hq/cockpit prior to version 2.6.3, allowing for the storage of malicious code.

A PHP Remote File Inclusion vulnerability exists in the GitHub repository cockpit-hq/cockpit prior to version 2.6.3.

A critical vulnerability was found in SourceCodester Pharmacy Management System version 1.0. It affects an unknown functionality of the file manage_website.php, leading to unrestricted file uploads.

A critical vulnerability was found in SourceCodester Online Hospital Management System version 1.0. Manipulation of the loginid and password arguments in the patientlogin.php file leads to SQL injection.

A critical vulnerability was found in SourceCodester Inventory Management System version 1.0. The issue affects some unknown processing of the file sell_return.php, where manipulation of the argument pid leads to SQL injection.

A vulnerability has been found in SourceCodester Inventory Management System 1.0 affecting unknown code of the file edit_update.php of the Password Handler component. Manipulation of the argument user_id leads to improper access controls.

A critical vulnerability was found in SourceCodester Inventory Management System version 1.0, affecting an unknown part of the file edit_sell.php. Manipulation of the argument up_pid leads to SQL injection.

A critical vulnerability has been found in SourceCodester Free Hospital Management System for Small Practices 1.0. The issue affects some unknown functionality of the file /vm/admin/delete-doctor.php?id=2 of the Redirect Handler component, leading to enforcement of unwanted workflow.

A critical vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Manipulation of the useremail/userpassword arguments in the /vm/login.php file leads to SQL injection, which can be executed remotely.

A critical vulnerability has been found in SourceCodester Free Hospital Management System for Small Practices version 1.0. Manipulation of the 'id' argument in the file /vm/doctor/doctors.php?action=view leads to SQL injection, which can be executed remotely.