2024

Cross-Site Request Forgery (CSRF) vulnerability in Fonts Plugin Fonts allows Stored XSS.This issue affects Fonts: from n

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zookatron MyBookTa

A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect devices exposed to the ext

Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token

A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unkn

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in gVectors Team wpForo Forum.This issue affect

A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via /music/ajax.ph

A vulnerability was found in code-projects Online Quiz Site 1.0. It has been rated as critical. Affected by this issue i

A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been declared as critical. Affected b

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown fu

A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat ac

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stark Digital WP T

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on F2FS_INLINE_DATA fl

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to cover read extent cache access with lo

In the Linux kernel, the following vulnerability has been resolved: fou: remove warn in gue_gro_receive on unsupported

In the Linux kernel, the following vulnerability has been resolved: jfs: fix null ptr deref in dtInsertEntry [syzbot r

Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could resul

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: wait for previous gc cycles whe

In the Linux kernel, the following vulnerability has been resolved: bnxt_en : Fix memory out-of-bounds in bnxt_fill_hw_

In the Linux kernel, the following vulnerability has been resolved: idpf: fix UAFs when destroying the queues The seco

In the Linux kernel, the following vulnerability has been resolved: nvme: apple: fix device reference counting Drivers

In the Linux kernel, the following vulnerability has been resolved: bpf: add missing check_func_arg_reg_off() to preven

In the Linux kernel, the following vulnerability has been resolved: media: xc2028: avoid use-after-free in load_firmwar

In the Linux kernel, the following vulnerability has been resolved: net: drop bad gso csum_start and offset in virtio_n

In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to mem_cgroup_idr

In the Linux kernel, the following vulnerability has been resolved: tracing: Have format file honor EVENT_FILE_FL_FREED

In the Linux kernel, the following vulnerability has been resolved: mm: list_lru: fix UAF for memory cgroup The mem_cg

Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certain configurations reg

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allow

Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is use

CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security

The TikTok (aka com.zhiliaoapp.musically) application before 34.5.5 for Android allows the takeover of Lynxview JavaScri

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor ca

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor ca

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor ca

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor ca

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor ca

The Image Hotspot by DevVN plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and includi

The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.

Guest users in the Mage AI framework that remain logged in after their accounts are deleted, are mistakenly given high p

An eval Injection vulnerability in the component invesalius/reader/dicom.py of InVesalius 3.1.99991 through 3.1.99998 al

Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function formWrlsafeset.

A SQL Injection vulnerability exists in the service configuration functionality in Centreon Web 24.04.x before 24.04.3,

Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function fromSetIpBind.

An issue in Netgear DGN1000WW v.1.1.00.45 allows a remote attacker to execute arbitrary code via the Diagnostics page

DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath.

publiccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin/cmsTemplate/saveMetaData

RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666

This openedx-translations repository contains translation files from Open edX repositories to be kept in sync with Trans

A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token