2024

An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting

An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, a

An issue was discovered in GitLab-EE starting with version 13.3 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.

Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.

Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.

Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.

CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability exists

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound (OOB) vulnerability was discov

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered

SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability.

Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager has been discovered in Open

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact al

Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000.

Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™

A vulnerability identified in OpenText™ Identity Manager AzureAD Driver that allows logging of sensitive information in

Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered i

Cross-site Scripting (XSS) vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve sess

The amCharts: Charts and Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'amcharts_jav

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in TE Informatics V5 allows

The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER['REQUEST_URI'] parameter before outputt

The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation

The blogintroduction-wordpress-plugin WordPress plugin through 0.3.0 does not have CSRF check in place when updating its

The Misiek Paypal WordPress plugin through 1.1.20090324 does not have CSRF check in some places, and is missing sanitisa

The Simple Headline Rotator WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitis

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could

The Quick Code WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well

The ILC Thickbox WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could

The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF check in some places, and is missing sanitisati

The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF checks in some places, which could allow attack

The Gixaw Chat WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.16 does not sanitise and escape some of its Give

The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could

The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before outp

The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places, and is missing sanitisat

The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which cou

The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which

A vulnerability, which was classified as problematic, has been found in SourceCodester Food Ordering Management System 1

A vulnerability classified as critical was found in code-projects Inventory Management 1.0. Affected by this vulnerabili

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affecte

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 3.0.6. It has been declared as problematic. Thi

A vulnerability was found in JFinalCMS up to 20240903. It has been classified as problematic. This affects the function

A vulnerability was found in Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System

A vulnerability classified as critical was found in TDuckCloud TDuckPro up to 6.3. Affected by this vulnerability is an

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with W

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface (CL

A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attac

A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote attac

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Inte