2024

A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown functio

A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07. This issue affects the functi

IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log file

The Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for

The Sync Post With Other Site plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c

The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘filename’ paramete

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through

FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.4 and earlier can leak authorize

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows

Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the conf

Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to XSS when displayin

Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/veranstaltunge

An Incorrect Access Control vulnerability in "/admin/benutzer/institution/rechteverwaltung/uebersicht" in Feripro <= v2.

Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately fi

Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into

The Comments – wpDiscuz plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 7.6.2

The specific API in HWATAIServiSign Windows Version from CHANGING Information Technology does not properly validate the

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate th

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for W

The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is ins

In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator accou

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whet

In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature leng

InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could le

The Essential Blocks WordPress plugin before 4.7.0 does not validate and escape some of its block options before output

The Spectra Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via block ids in all versions up to, a

CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Clus

A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this

A vulnerability has been found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by

A vulnerability, which was classified as critical, was found in SourceCodester Simple Realtime Quiz System 1.0. Affected

The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.8001.

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Realtime Quiz System 1.0. Thi

A vulnerability classified as critical was found in SourceCodester Simple Realtime Quiz System 1.0. This vulnerability a

Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configur

A vulnerability classified as critical has been found in SourceCodester Simple Realtime Quiz System 1.0. This affects an

A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0. It has been rated as critical. Affected by

A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0. It has been declared as critical. Affected

A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0. It has been classified as critical. Affecte

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Modernaweb

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Registratio

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeGrill

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Imagely Nex

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rob @ 5 Star Plugi

Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a bu

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a windo

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in petesheppar

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BdThemes El

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in YMC Filter

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Modernaweb