2024

Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have loc

Astro is a web framework for content-driven websites. A bug in the build process allows any unauthenticated user to read

The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.

IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive infor

IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service

IBM Security Guardium 11.5 and 12.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated

A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. This affects an unknown pa

A vulnerability, which was classified as problematic, has been found in PbootCMS up to 5.2.3. Affected by this issue is

IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive infor

A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This affects an unknown part of t

A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by t

A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been classified as critical. Affected is

PVH guests have their ACPI tables constructed by the toolstack. The construction involves building the tables in local

The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the (virtual) VGA is in "standard" m

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Agency Dominion In

The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing

Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and b

A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6

The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Sensitive Inf

The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to im

The Broken Link Checker | Finder plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions

The WP Project Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and i

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of servic

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. I

IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 could allow a user with psychical access to the system to obta

IBM Cognos Analytics Mobile for Android 1.1.14 uses weaker than expected cryptographic algorithms that could allow an at

Kanboard is project management software that focuses on the Kanban methodology. In affected versions sessions are still

Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affe

IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By per

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnera

A vulnerability in Amiro.CMS before 7.8.4 exists due to the failure to take measures to neutralize special elements. It

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar

Insecure Permissions vulnerability in SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and before allows a physically proxi

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000

An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows un

An IDOR vulnerability in the edit-notes.php module of PHPGurukul Online Notes Sharing Management System v1.0 allows unau

Astro is a web framework for content-driven websites. In affected versions a bug in Astro’s CSRF-protection middleware a

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, r

A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacke

Envoy is a cloud-native high-performance edge/middle/service proxy. When additional address are not ip addresses, then t

Misskey is an open source, federated social media platform.In affected versions missing validation in `NoteCreateService

Misskey is an open source, federated social media platform. In affected versions missing validation in `ApInboxService.u

Misskey is an open source, federated social media platform. In affected versions missing validation in `ApRequestService