2024

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL in

Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.

Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been declared as critical. Affected by

Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).This issue

A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects

A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. This vulnerabi

A vulnerability, which was classified as critical, was found in itsourcecode Laravel Accounting System 1.0. This affects

oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attacker

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.

Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. The `navigateTo

mailcow: dockerized is an open source groupware/email suite based on docker. A vulnerability has been discovered in the

Kubean is a cluster lifecycle management toolchain based on kubespray and other cluster LCM engine. The ClusterRole has

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Persistent Cross-Site Scriptin

Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane. The vulnerability affects all v

microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\settings\ad

microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\tags\add_ta

A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service (DoS) via a crafted AVI file.

Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially le

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC s

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integr

Information disclosure while handling beacon probe frame during scan entry generation in client side.

Information disclosure while handling beacon or probe response frame in STA.

The Ditty WordPress plugin before 3.1.45 does not sanitise and escape some parameters, which could allow users with a r

The Chatbot for WordPress by Collect.chat ⚡️ WordPress plugin before 2.4.4 does not sanitise and escape some of its sett

The Community Events WordPress plugin before 1.5.1 does not sanitise and escape some of its settings, which could allow

The wp-eMember WordPress plugin before v10.7.0 does not have CSRF check in some places, and is missing sanitisation as w

The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings, which

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been rated as critical. This i

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been declared as critical. Thi

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been classified as critical. T

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 and classified as critical. Affected b

A vulnerability, which was classified as critical, has been found in TOTOLINK CP900 6.3c.566. This issue affects the fun

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been classified as problematic. Affected

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown proces

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affec

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.

A vulnerability was found in itsourcecode Placement Management System 1.0. It has been classified as critical. This affe

A vulnerability was found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this i

A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by t

A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects

A vulnerability, which was classified as critical, has been found in itsourcecode Ticket Reservation System 1.0. Affecte

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. Aff

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been rated as critical. T

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d. It has been classified as critic

A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability

APM server logs contain document body from a partially failed bulk index request. For example, in case of unavailable_sh