2024

In the Linux kernel, the following vulnerability has been resolved: riscv/purgatory: align riscv_kernel_entry When ali

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix refcount underflow Calling

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always drain health in shutdown callback

In the Linux kernel, the following vulnerability has been resolved: s390/fpu: Re-add exception handling in load_fpu_sta

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a deadlock in dma buf fence polling

In the Linux kernel, the following vulnerability has been resolved: net: wan: fsl_qmc_hdlc: Convert carrier_lock spinlo

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: fix memory leak for not ip pack

Khoj is an application that creates personal AI agents. The Automation feature allows a user to insert arbitrary HTML in

Casdoor is a UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform. In Casdoor 1.577.0 and earl

An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the

An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a GitHub App with only

IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due t

Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user

Discourse Placeholder Forms will let you build dynamic documentation. Unsanitized and stored user input was injected in

SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_editplay

The stripImages and stripIframes methods didn't properly process inputs, leading to XSS vectors.

The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions.

Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not..

Ghost is a Node.js content management system. Improper authentication on some endpoints used for member actions would al

Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that al

Umbraco CMS is an ASP.NET CMS. An authenticated user can access a few unintended endpoints. This issue is fixed in 14.1.

Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room o

Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the homepage, xmpp, and matrix par

A cross-site scripting (XSS) vulnerability in the component update_page_details.php of Blood Bank And Donation Managemen

7Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Priority – CWE-552: Files or Directories Accessible to External Parties

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Ericsson Packet Core Controller (PCC) contains a vulnerability in Access and Mobility Management Function (AMF) where im

The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress

In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a speci

The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'course_carouse

The WP Last Modified Info plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘template’ attribute

The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form buil

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre

Missing Authorization When Using @AuthorizeReturnObject in Spring Security 6.3.0 and 6.3.1 allows attacker to render sec

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0.

A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Af

The BP Profile Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access and dele

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data

A vulnerability was found in itsourcecode Laravel Property Management System 1.0 and classified as critical. This issue

A vulnerability classified as critical was found in itsourcecode Project Expense Monitoring System 1.0. This vulnerabili

A vulnerability classified as critical has been found in itsourcecode Project Expense Monitoring System 1.0. This affect

A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been rated as critical. Affected

A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been declared as critical. Affec

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue aff