2024

Improper authorization in handler for custom URL scheme issue in "@cosme" App for Android versions prior 5.69.0 and "@co

The Pocket Widget WordPress plugin through 0.1.3 does not sanitise and escape some of its settings, which could allow hi

The Snapshot Backup WordPress plugin through 2.1.1 does not have CSRF check in some places, and is missing sanitisation

The AZIndex WordPress plugin through 0.8.1 does not have CSRF checks in some places, which could allow attackers to make

The AZIndex WordPress plugin through 0.8.1 does not have CSRF check in some places, and is missing sanitisation as well

The EventON WordPress plugin before 2.2.17 does not sanitise and escape some of its settings, which could allow high pri

The Popup Maker WordPress plugin before 1.19.1 does not sanitise and escape some of its settings, which could allow hig

Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an

WebITR from Uniong has an Open Redirect vulnerability, which allows unauthorized remote attackers to exploit this vulner

Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowi

Loway - CWE-204: Observable Response Discrepancy

Loway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 and classified as critical. This vulnerabilit

A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this i

The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its settings, which could

The WP MultiTasking WordPress plugin through 0.1.12 does not validate and escape some of its shortcode attributes befor

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could all

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating welcome popups, which could

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which

A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901. Affected is the function rewa

A vulnerability classified as problematic was found in code-projects Online Shop Store 1.0. This vulnerability affects u

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been declared as critical. This vulnerability affects u

A vulnerability has been found in SourceCodester PHP CRUD 1.0 and classified as critical. Affected by this vulnerability

A vulnerability, which was classified as critical, was found in SourceCodester Simple Invoice Generator System 1.0. Affe

A vulnerability, which was classified as critical, has been found in SourceCodester Online Food Menu 1.0. This issue aff

An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.

A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection.

A vulnerability classified as problematic was found in SourceCodester Food Ordering Management System 1.0. This vulnerab

Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be

A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. This affect

A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic

IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper memory allocation cau

IBM Maximo Application Suite - Manage Component 8.10, 8.11, and 9.0 uses weaker than expected cryptographic algorithms t

The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valid

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and incl

The Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is vulnerable to Full Path Disclosure in a

A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the function formatD

The Preloader Plus – WordPress Loading Screen Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index o

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stac

When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a p

A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If exploited, the vulnerability

A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability

A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul