2024

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploite

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi

An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability coul

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnera

Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be CR LF DOT CR LF. This

The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing cap

The Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scrip

The Advanced Sermons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sermon_video_embed’ para

A cross-site scripting (XSS) vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute

`gix-path` is a crate of the `gitoxide` project (an implementation of `git` written in Rust) dealing paths and their con

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to versio

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.11.0, commitments t

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundn

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unau

The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ad

tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed

The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including

The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3.

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, i

ckeditor-plugin-openlink is a plugin for the CKEditor JavaScript text editor that extends the context menu with a possib

Credentials to access device configuration were transmitted using an unencrypted protocol. These credentials would allow

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow

An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used

Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.24.3, 20.9.3, and 21.4.3 of Asterisk and

Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email,

RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive authentication attempts an

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper input validation, the C-MOR web

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource mod

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource mod

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user with access to the package to obtain sensitive information thro

An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authen

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of t

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of t

Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of t

A vulnerability, which was classified as problematic, was found in D-Link DNS-320 2.02b01. This affects an unknown part

The HelloAsso plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing authorization a

The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability c

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the

The Security, Antivirus, Firewall – S.A.F plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, a

The Cab fare calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vehicle title setting

The Dynamic Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘dfiFeatured’ param

The RD Station plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5

The Booking for Appointments and Events Calendar – Amelia Premium and Lite plugins for WordPress are vulnerable to unaut