2024

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Cr

The TLS certificate validation code is flawed. An attacker can obtain a TLS certificate from the Stork server and use it

CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service, privilege escalation, a

CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a malicio

CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or kernel memory leak when a

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could r

The WP ERP plugin for WordPress is vulnerable to SQL Injection via the ‘vendor_id’ and 'status' parameter in all version

The VikRentCar Car Rental Management System WordPress plugin before 1.3.2 does not have CSRF checks in some places, whic

VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authent

A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability af

The FULL – Cliente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the license plan parameter in a

An Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in J-Web shipped with Juni

A Missing Release of Resource after Effective Lifetime vulnerability the xinetd process, responsible for spawning SSH da

An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Ju

A Heap-based Buffer Overflow vulnerability in the telemetry sensor process (sensord) of Juniper Networks Junos OS on MX2

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows

Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5

Next.js is a React framework. A Denial of Service (DoS) condition was identified in Next.js. Exploitation of the bug can

CodiMD allows realtime collaborative markdown notes on all platforms. The notebook feature of Hackmd.io permits the rend

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

Sensitive information disclosure in NetScaler Console

Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler

Decidim is a participatory democracy framework. The pagination feature used in searches and filters is subject to potent

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic Newspack Blocks.This issue affect

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This i

Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0.

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mud

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mud

Cross-Site request forgery in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) could lead to 1-click com

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <=

An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP servic

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warnin

Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a specially crafted requ

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation in al

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject t

An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a poten

All versions of the package speaker are vulnerable to Denial of Service (DoS) when providing unexpected input types to t

All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the

All versions of the package node-stringbuilder are vulnerable to Out-of-bounds Read due to incorrect memory length calcu

All versions of the package images are vulnerable to Denial of Service (DoS) due to providing unexpected input types to

All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to th

All versions of the package @discordjs/opus are vulnerable to Denial of Service (DoS) due to providing an input object w

The Houzez CRM plugin for WordPress is vulnerable to time-based SQL Injection via the notes ‘belong_to’ parameter in all