2024

An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change f

A Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enable

A stored cross-site scripting (XSS) vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to exe

When performing an online tag generation to devices which communicate using the ControlLogix protocol, a machine-in-the

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a

In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin

In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page

reNgine is an automated reconnaissance framework for web applications. Versions 2.1.2 and prior are susceptible to Store

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In versions on the 1.15.x bra

The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' and 'slide_id' parameters

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Uti

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Uti

The JetBlocks for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple placeholder p

The JetSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions u

Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Valida

The Download Plugins and Themes in ZIP from Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery i

The Theme My Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Information Exposure in all versions up to, and i

The Custom Field For WP Job Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versio

The Cookie Notice & Compliance for GDPR / CCPA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical

A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vul

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by th

The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new fi

A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Aff

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Graduate Tracer System 1.0

A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System 1.0. This vulnerabi

In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.14.14 and

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In the 1.15 branch prior to 1

In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero.

In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow.

In the OAuth library for nim prior to version 0.11, the Authorization Code grant and Implicit grant both rely on the `st

In the OAuth library for nim prior to version 0.11, the `state` values generated by the `generateState` function do not

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via t

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via t

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via t

eLabFTW is an open source electronic lab notebook for research labs. In an eLabFTW system, one can configure who is allo

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter.

XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows

A Server-Side Request Forgery (SSRF) vulnerability in Terminalfour before 8.3.19 allows authenticated users to use speci

IBM InfoSphere Information Server could allow an authenticated user to consume file space resources due to unrestricted

IBM InfoSphere Information Server 11.7 could allow a privileged user to obtain sensitive information from authentication

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failu

Authentication Bypass in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to gain a privi

Information Disclosure in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to read the Wi