2024

A remote code execution (RCE) vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attacke

Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb.

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to prote

Scout is a web-based visualizer for VCF-files. Due to the lack of sanitization in the filename, it is possible bypass in

Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users b

basic-auth-connect is Connect's Basic Auth middleware in its own module. basic-auth-connect < 1.1.0 uses a timing-unsafe

AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerabil

A reflected cross-site scripting (XSS) vulnerability on the homepage of Metronic Admin Dashboard Template v2.0 allows at

Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacke

Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. If an atta

Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. If a malic

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Using a crafted POST request, an unprivileged, registered

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muhammad Shakeel C

A Stored Cross-Site Scripting (XSS) vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts

Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replica

In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the

Certain switch models from PLANET Technology have a web application that does not properly validate specific parameters,

The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-

Certain switch models from PLANET Technology use an insecure hashing function to hash user passwords without being salte

In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to e

Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability

Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allo

The Ultimate Blocks WordPress plugin before 3.2.2 does not validate and escape some of its block attributes before outp

The Slider by 10Web WordPress plugin before 1.2.59 does not sanitise and escape some of its settings, which could allow

The Starbox WordPress plugin before 3.5.3 does not properly render social media profiles URLs in certain contexts, like

The Post Grid WordPress plugin before 7.5.0 does not sanitise and escape some of its Grid settings, which could allow h

A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This i

A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability a

A vulnerability was found in Intelbras InControl up to 2.21.57. It has been rated as critical. Affected by this issue is

A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0 and classified as critical. This issue

A vulnerability, which was classified as critical, was found in SourceCodester Online Timesheet App 1.0. This affects an

A vulnerability, which was classified as critical, has been found in SourceCodester Advocate Office Management System 1.

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerabili

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as crit

A vulnerability classified as problematic was found in SourceCodester Online Railway Reservation System 1.0. This vulner

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been rated as problematic. Aff

The WP MultiTasking – WP Utilities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpmt_menu_

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been declared as critical. Aff

The GTM Server Side plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg

Alpine Halo9 UPDM_wemCmdUpdFSpeDecomp Command Injection Remote Code Execution Vulnerability. This vulnerability allows p

Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability. This vulnerability allows physically presen

Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerabilit

Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability. This vulnerability allows

The Simple LDAP Login plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_a

The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a m

The WP-WebAuthn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wwa_login_form shortc

The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the us

The Simple Popup Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [popup] short