2024

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not p

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application

A vulnerability has been identified in RUGGEDCOM RMC30 (All versions < V4.3.10), RUGGEDCOM RMC30NC (All versions < V4.3.

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of aff

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of aff

A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (A

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PluginsWare Advanced Cla

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetThemeCore

Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue

A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out

A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out

A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains an out

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i80

A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC S

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultimate Bootstr

Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor allows Privilege Escalatio

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Codeless Cowidgets – Ele

A BOLA vulnerability in POST /services allows a low privileged user to create a service for any user in the system (incl

A BOLA vulnerability in POST /providers allows a low privileged user to create a privileged user (provider) in the syste

A BOLA vulnerability in POST /secretaries allows a low privileged user to create a low privileged user (secretary) in th

A BOLA vulnerability in GET, PUT, DELETE /categories/{categoryId} allows a low privileged user to fetch, modify or delet

In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in bond_option_arp_

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in kaptinlin Striking allow

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in smartypants SP Project &

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Mas

A BOLA vulnerability in POST /appointments allows a low privileged user to create an appointment for any user in the sys

The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & C

The Easy Pixels plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up

The Panda Video plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.0 v

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in KaineLabs Youzify.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paid Memberships P

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Marketing Aut

The ScrollTo Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in version

The ScrollTo Top plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions u

The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File

The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File

The Advanced AJAX Page Loader plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload

The Attachment File Icons (AF Icons) plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File

The EventON plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

The Default Thumbnail Plus plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat

The Bit Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'ic

A remote attacker with high privileges may use a deleting file function to inject OS commands.

A remote attacker with high privileges may use a writing file function to inject OS commands.

A remote attacker with high privileges may use a reading file function to inject OS commands.

The Modern Events Calendar plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based