2024

Missing Authorization vulnerability in RexTheme WP VR wpvr allows Exploiting Incorrectly Configured Access Control Secur

E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server direct

Cross-Site Request Forgery (CSRF) vulnerability in Automattic Crowdsignal Dashboard – Polls, Surveys & more polldaddy al

Cachi2 is a command-line interface tool that pre-fetches a project's dependencies to aid in making the project's build p

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allow

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the U

DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ip_position_asp function via the ip parameter.

A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the underlying system (e.g. local

Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in

The Bard theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without app

The Ashe theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without app

SourceCodester Sentiment Based Movie Rating System 1.0 is vulnerable to SQL Injection in /msrps/movies.php.

The Parallax Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘position’ parameter in all

The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘extra_class’ parameter i

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized m

The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's print_em

The The WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup plugin for WordPress

The The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for Wo

Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients

The SVG Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all ver

The WordPress GDPR plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on

The WordPress GDPR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdpr_firstname' and 'gdpr_

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross

Improper Validation of Specified Type of Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-E

In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to impl

Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service (ReDoS) d

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since

In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_p

In the Linux kernel, the following vulnerability has been resolved: regulator: rtq2208: Fix uninitialized use of regula

In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb(

In the Linux kernel, the following vulnerability has been resolved: net: enetc: allocate vf_state during PF probes In

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Enqueue Tx packets in dql bef

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when uninstalling drive

In the Linux kernel, the following vulnerability has been resolved: net: arc: fix the device for dma_map_single/dma_unm

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing locking causing hanging calls I

In the Linux kernel, the following vulnerability has been resolved: net/smc: do not leave a dangling sk pointer in __sm

In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: spdifrx: fix dma channel release in st

In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: add missing buffer index check dv

In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus

In the Linux kernel, the following vulnerability has been resolved: media: av7110: fix a spectre vulnerability As warn

In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix buffer overwrite when using > 32

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: prevent the risk of a division by

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in ksmbd_smb2_sessio

In the Linux kernel, the following vulnerability has been resolved: ksmbd: check outstanding simultaneous SMB operation

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix the missing xa_store error check xa_sto

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in smb3_preauth_hash

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add missing size check in amdgpu_debugf

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix NULL dereference in AEAD cr

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayed_work o

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bit