2024

Ruoyi v4.7.9 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the sql parameter of th

Roughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset

The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability

The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress

HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS). An unaut

HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching remote co

Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX

In the Linux kernel, the following vulnerability has been resolved: mm: gup: stop abusing try_grab_folio A kernel warn

A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnera

The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including,

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Ma

A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and d

A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled fun

A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information. This issue affects N

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may a

Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation result

The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, an

The Relevanssi Live Ajax Search plugin for WordPress is vulnerable to argument injection in all versions up to, and incl

A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. This vulnerability affects un

A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. Affected by this issu

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. Affected by

A vulnerability, which was classified as critical, has been found in nafisulbari/itsourcecode Insurance Management Syste

A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DN

A vulnerability classified as critical has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320L

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-32

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-32

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-32

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree

An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, leads to ECDSA k

The AWS Cloud Development Kit (CDK) is an open-source framework for defining cloud infrastructure using code. Customers

Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod

Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmd

Webpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capab

The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for Wor

The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for Wor

An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, inclu

An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified U

In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating S

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi

A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 2

The Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid plugin for WordPress is vulnerable to Stored Cross-S

An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal.

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local denial-of-service attack by a low privilege

The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all vers

The Oxygen Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c

Tophat is a mobile applications testing harness. An Improper Access Control vulnerability can expose the `TOPHAT_APP_TOK

Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dylan James