2024

A vulnerability classified as critical has been found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. T

Missing Authorization vulnerability in VIICTORY MEDIA LLC Z Y N I T H allows Accessing Functionality Not Properly Constr

Missing Authorization vulnerability in VIICTORY MEDIA LLC Z Y N I T H allows Accessing Functionality Not Properly Constr

Improper Control of Generation of Code ('Code Injection') vulnerability in NitroPack Inc. NitroPack allows Code Injectio

A vulnerability was found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. It has been rated as critical

The FunnelKit Funnel Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'allow_iframe

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. A

A vulnerability was found in FeehiCMS up to 2.1.1 and classified as critical. This issue affects the function insert of

The Premium SEO Pack – WP SEO Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all version

The Popup Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includ

The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the functi

A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update o

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘t

The Front End Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'user-search' sho

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to

The Page Builder Gutenberg Blocks WordPress plugin before 3.1.13 does not escape the content of post embed via one of i

The Viral Signup WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in all

The WP Accessibility Helper (WAH) plugin for WordPress is vulnerable to unauthorized modification of data due to a missi

The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress

Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL <= R 4.4-00P3 may allow a network-based a

The Gutentor WordPress plugin before 3.3.6 does not validate and escape some of its block options before outputting the

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople

The WP To Do plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and in

Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Improper Input Validation vulnerability.

In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity tests to TCP_QUEUE_SEQ Qingyu Li r

The Media Library Folders plugin for WordPress is vulnerable to second order SQL Injection via the 'sort_type' parameter

'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and earlier are vulnerable t

An issue was discovered in powermail extension through 12.3.5 for TYPO3. It fails to validate the mail parameter of the

i-Educar is free, fully online school management software that can be used by school secretaries, teachers, coordinators

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In affected versions `\PhpOffice\PhpSpre

The OpenTelemetry Collector module AWS firehose receiver is for ingesting AWS Kinesis Data Firehose delivery stream mess

An issue in the component EXR!ReadEXR+0x4eef0 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a

An issue in the component EXR!ReadEXR+0x3df50 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a

An issue in the component EXR!ReadEXR+0x40ef1 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a

In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical Step in Multi-Factor Authentication of the Web Tra

In WS_FTP Server versions before 8.8.8 (2022.0.8), an Improper Limitation of a Pathname to a Restricted Directory ('Path

Improper access control in the clipboard synchronization feature in TeamViewer Full Client prior version 15.57 and TeamV

JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in In

EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in I

A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC) and Cisco

A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash

A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execu

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local at

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local at

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local at

A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (