2024

decidim is a Free Open-Source participatory democracy, citizen participation and open government for cities and organiza

Concrete CMS versions 9.0.0 to 9.3.3 and below 8.5.19 are vulnerable to Stored XSS in the "Next&Previous Nav" block. A r

Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable

Improper input validation in some Intel(R) RAID Web Console software all versions may allow an authenticated user to pot

Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potent

Uncontrolled search path element in Intel(R) RAID Web Console software for all versions may allow an authenticated user

Uncaught exception in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially ena

Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potent

NULL pointer dereference in Intel(R) RAID Web Console software for all versions may allow an authenticated user to poten

Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to pote

Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable

Improper conditions check in some Intel(R) Processors with Intel(R) SGX may allow a privileged user to potentially enabl

NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially en

Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable esca

IBM Aspera Shares 1.0 through 1.10.0 PL3 does not invalidate session after a password reset which could allow an authent

Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password and visible

Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows

The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fa

OMFLOW from The SYSCOM Group does not properly restrict the query range of its data query functionality, allowing remote

OMFLOW from The SYSCOM Group does not properly validate user input of the download functionality, allowing remote attack

SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers t

A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown functio

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can co

A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1. Affected by th

A vulnerability classified as critical was found in vedees wcms up to 0.3.2. Affected by this vulnerability is an unknow

app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensiti

A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Cus

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreat

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreat

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreat

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreat

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in manu225 Flipping C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomUnited WP Meta

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomUnited WP Meta

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Happyforms

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hiroaki Miy

A vulnerability was found in AutoCMS 5.4. It has been classified as problematic. This affects an unknown part of the fil

A vulnerability has been found in composiohq composio up to 0.5.6 and classified as critical. Affected by this vulnerabi

The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up

The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the

The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext durin

The WooCommerce Multiple Free Gift plugin for WordPress is vulnerable to gift manipulation in all versions up to, and in

there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure wit

BT: Unchecked user input in bap_broadcast_assistant

A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnera

BT: Missing length checks of net_buf in rfcomm_handle_data

A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete