2024

Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer.This issue affects Pag

Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor

Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor

Missing Authorization vulnerability in Thrive Themes Thrive Theme Builder.This issue affects Thrive Theme Builder: from

Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through

In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in m

The Pexels: Free Stock Photos plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type vali

The WP Magazine Modules Lite plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and inclu

The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery

The Photo Video Gallery Master plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inc

The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missin

The Login with phone number plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and in

Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vuln

Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent

Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabilit

Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows net

Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows ne

Incorrect CSRF token checks resulted in multiple CSRF risks.

The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header

An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attacker

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Wait unconditionally after issuing EndXf

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_

CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdi

A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to by

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the

A hard-coded password in the FileCatalyst TransferAgent can be found which can be used to unlock the keystore from which

A vulnerability, which was classified as critical, has been found in itsourcecode Simple Online Hotel Reservation System

IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could a

A vulnerability classified as critical was found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by

A vulnerability classified as critical has been found in itsourcecode Monbela Tourist Inn Online Reservation System up t

A vulnerability classified as critical was found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This vu

A vulnerability classified as critical has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0. Th

A vulnerability was found in itsourcecode Magbanua Beach Resort Online Reservation System up to 1.0. It has been rated a

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An auth

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability

The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.

A vulnerability has been found in itsourcecode Pool of Bethesda Online Reservation System up to 1.0 and classified as cr

A vulnerability classified as critical was found in Intelbras InControl 2.21.56. This vulnerability affects unknown code

A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. This issue a

Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.6.5 has SQL injection vulnerabi

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.max

oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS

A Directory Traversal vulnerability in KasmVNC 1.3.1.230e50f7b89663316c70de7b0e3db6f6b9340489 and possibly earlier versi

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Co

A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT-LIB inp

Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT2 i

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the e

apphp js-object-resolver < 3.1.1 is vulnerable to Prototype Pollution via Module.setNestedProperty.