2024

The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPr

In ICMPv6 Neighbor Discovery (ND), the ID is always 0. When pf is configured to allow ND and block incoming Echo Reques

The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all ver

The Category Posts Widget WordPress plugin before 4.9.17, term-and-category-based-posts-widget WordPress plugin before 4

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could all

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputtin

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputtin

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for W

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for W

Concrete CMS versions 9.0.0 to 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in RSS Displayer when user input is s

DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software developer,

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. S

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. C

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions on the 3.10 branch prior to

Insufficiently random values for generating activation token in FIWARE Keyrock <= 8.4 allow attackers to activate accoun

Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to disable two

Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer. This issue affects Apache Answer:

Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer. This issue affects Apache Answer:

Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the MathJax component.

Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the Mermaid component.

Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 al

A Reflected Cross Site Scripting (XSS) vulnerability was found in "/oahms/search.php" in PHPGurukul Old Age Home Managem

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/view-enquiry.php" in PHPGurukul Old Age Home Mana

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1

A Reflected Cross Site Scripting (XSS) vulnerability was found in "edit-cate.php" in SourceCodester House Rental Managem

A Stored Cross Site Scripting (XSS) vulnerability was found in "manage_houses.php" in SourceCodester Best House Rental M

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Office Spoofing Vulnerability

An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the lo

A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local

A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integri

User with no permission to any of the Hosts can access and view host count & other statistics through System Information

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability through a url parameter in

NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may caus

In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot compon

IBM Aspera Shares 1.10.0 PL2 does not invalidate session after a password change which could allow an authenticated user

Dorsett Controls InfoScan is vulnerable due to a leak of possible sensitive information through the response headers an

The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system, which cou

Dorsett Controls Central Server update server has potential information leaks with an unprotected file that contains pa

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a us

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01 fails

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02 fails to validate

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR4 fails to validate /etc/initab during the Pre-Boot Authoriz

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR10 fails to validate /etc/mtab during the Pre-Boot Authoriza

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01 fails to validate

Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName(). A rogue a

An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interfa

A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privil

A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0 allows an