2024

Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affec

Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerabi

Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerab

Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulne

Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulne

Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect s

The WooCommerce Report plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and in

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sens

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sens

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read.

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sens

The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to

The Pods WordPress plugin before 3.2.7.1 does not sanitise and escape some of its settings, which could allow high priv

The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow at

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in re

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not

The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could

A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an

A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue aff

The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'scu' short

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulner

cobalt is a media downloader that doesn't piss you off. A malicious cobalt instance could serve links with the `javascri

WebFeed is a lightweight web feed reader extension for Firefox/Chrome. Multiple HTML injection vulnerabilities in WebFee

Combodo iTop is a simple, web based IT Service Management tool. Server, OS, DBMS, PHP, and iTop info (name, version and

Combodo iTop is a simple, web based IT Service Management tool. A CSRF can be performed on CSV import simulation. This i

Combodo iTop is a simple, web based IT Service Management tool. By filling malicious code in a CSV content, an Cross-sit

Combodo iTop is a simple, web based IT Service Management tool. When displaying pages/ajax.render.php XSS are possible f

Combodo iTop is a simple, web based IT Service Management tool. When displaying pages/ajax.searchform.php XSS are possib

Combodo iTop is a simple, web based IT Service Management tool. When displaying page Run queries Cross-site Scripting (X

Zope AccessControl provides a general security framework for use in Zope. In affected versions anonymous users can delet

loona is an experimental, HTTP/1.1 and HTTP/2 implementation in Rust on top of io-uring. `loona-hpack` suffers from the

Refit is an automatic type-safe REST library for .NET Core, Xamarin and .NET The various header-related Refit attributes

Meshtastic firmware is a device firmware for the Meshtastic project. The Meshtastic firmware does not check for packets

langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the

gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket s

localai <=2.20.1 is vulnerable to Cross Site Scripting (XSS). When calling the delete model API and passing inappropriat

In gradio <=4.42.0, the gr.DownloadButton function has a hidden server-side request forgery (SSRF) vulnerability. The re

In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression. W

A vulnerability was found in code-projects University Event Management System 1.0. It has been classified as critical. T

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` c

Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within th

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 108

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when process

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issu

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrator

Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrato