2024

The SimpleForm Contact Form Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the

The SimpleForm – Contact form made simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to th

The Gallery Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_Query_

The WP Chat App plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check

The The Drop Shadow Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and

The Steel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btn shortcode in all versio

The PJW Mime Config plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versio

The ConvertCalculator for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' and '

The Popup Box – Create Countdown, Coupon, Video, Contact Form Popups plugin for WordPress is vulnerable to unauthorized

The Popularis Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2

The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capabil

When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past t

A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as critical. Affect

A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer c

A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on configuration,

A security vulnerability has been identified in HPE Data Management Framework (DMF) Suite (CXFS). Depending on configura

FlightPath 7.5 contains a Cross Site Scripting (XSS) vulnerability, which allows authenticated remote attackers with adm

GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to downlo

A vulnerability, which was classified as critical, was found in SourceCodester Student Record Management System 1.0. Aff

In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missin

In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resou

In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. T

In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions

In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypas

Trial installer for McAfee Total Protection (legacy trial installer software) 16.0.53 allows local privilege escalation

Azure Stack HCI Elevation of Privilege Vulnerability

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0

A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug hig

In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This cou

Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disc

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking an

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 all

A security bypass vulnerability exists in the Removable Media Encryption (RME)component of Digital Guardian Windows Agen

An invalid memory access when handling the ProtocolIE_ID field of S1Setup Request messages in Athonet vEPC MME v11.4.0 a

An invalid memory access when handling the ENB Configuration Transfer messages containing invalid PLMN Identities in Ath

An invalid memory access when handling the ProtocolIE_ID field of E-RAB Setup List Context SURes messages in Athonet vEP

An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC

An invalid memory access when handling the ProtocolIE_ID field of E-RAB Modify Request messages in Athonet vEPC MME v11.

An invalid memory access when handling the ProtocolIE_ID field of E-RAB NotToBeModifiedBearerModInd information element

An invalid memory access when handling the ProtocolIE_ID field of E-RAB Release Indication messages in Athonet vEPC MME

A vulnerability, which was classified as problematic, has been found in code-projects Farmacia 1.0. This issue affects s

A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerabili

A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affect

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue af

In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and s

An issue in UltiMaker Cura v.4.41 and 5.8.1 and before allows a local attacker to execute arbitrary code via Inter-proce

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey p

An issue in TOTOLINK Bluetooth Wireless Adapter A600UB allows a local attacker to execute arbitrary code via the WifiAut