2024

Missing Authorization vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Exploiting

Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web

Unrestricted Upload of File with Dangerous Type vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-p

HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was ena

A vulnerability was found in ZZCMS 2023. It has been classified as critical. Affected is the function Ebak_SetGotoPak of

A vulnerability was found in ZZCMS 2023 and classified as critical. This issue affects some unknown processing of the fi

A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function Ebak_Do

Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for

Authentication Bypass Using an Alternate Path or Channel vulnerability in Vitalii iBryl Switch User ibryl-switch-user al

Pimcore is an open source data and experience management platform. When a PortalUserObject is connected to a PimcoreUser

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fir

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fir

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fir

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fir

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2

HCL Sametime is impacted by misconfigured security related HTTP headers. It was identified that some HTTP headers were m

A vulnerability, which was classified as problematic, was found in ZZCMS 2023. This affects an unknown part of the file

A vulnerability, which was classified as critical, has been found in Tenda RX9 and RX9 Pro 22.03.02.20. Affected by this

A vulnerability classified as critical was found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected by this vuln

Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket

A vulnerability classified as critical has been found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected is the

A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has

The Nioland theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘s’ parameter in all versions up

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code o

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the fil

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially

A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functiona

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses

The Qi Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,

Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrai

The Transients Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

The ProfilePress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauth

The Download Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks

In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix move_normal_pmd/retract_page_tables

The WooCommerce Order Proposal plugin for WordPress is vulnerable to privilege escalation via order proposal in all vers

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of serv

Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric

SQL Injection vulnerability in hospital management system in php with source code v.1.0.0 allows a remote attacker to ex

Cross Site Scripting vulnerability in student management system in php with source code v.1.0.0 allows a remote attacker

Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the cont

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera (Firmware Version v3.0.0.1889_230

itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastna

Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which c