2024

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SKT Themes

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibs

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Team Member

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chris Coyie

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c

A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96 allows attackers to execute

The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to Path Traversal in versions 7.3.0 to 7.5.

The Addonify – Quick View For WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up

The Easy Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'testimonials_g

The Conditional Fields for Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions u

Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via th

Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to insert a comment. NOTE: th

Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. `API_URLS` is utilizing HTTP instead of HTTP

In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due

Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application En

Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application En

A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to

A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Refer

A vulnerability was found in SourceCodester Record Management System 1.0 and classified as critical. This issue affects

A vulnerability has been found in SourceCodester Record Management System 1.0 and classified as critical. This vulnerabi

A vulnerability, which was classified as critical, was found in SourceCodester Record Management System 1.0. This affect

Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If this vulnerability is expl

A vulnerability, which was classified as critical, has been found in SourceCodester Record Management System 1.0. Affect

A vulnerability classified as critical was found in SourceCodester Record Management System 1.0. Affected by this vulner

The YITH Essential Kit for WooCommerce #1 plugin for WordPress is vulnerable to unauthorized modification of data due to

A vulnerability classified as critical has been found in SourceCodester Record Management System 1.0. Affected is an unk

A vulnerability was found in SourceCodester Record Management System 1.0. It has been rated as critical. This issue affe

The Bug Library WordPress plugin before 2.1.2 does not sanitise and escape some of its settings, which could allow high

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, a

A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as critical. This vulnera

Versions of the package github.com/gitpod-io/gitpod/components/server/go/pkg/lib before main-gha.27122; versions of the

Microsoft Edge (Chromium-based) Spoofing Vulnerability

The Duplica – Duplicate Posts, Pages, Custom Posts or Users plugin for WordPress is vulnerable to unauthorized modificat

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and i

The PHPGurukul Online Shopping Portal Project version 2.0 contains a vulnerability that allows Cross-Site Request Forger

HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malic

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read contai

Improper Restriction of XML External Entity Reference vulnerability in PruvaSoft Informatics Apinizer Management Console

HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the s

Authentication Bypass Using an Alternate Path or Channel vulnerability in PruvaSoft Informatics Apinizer Management Cons

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The `UserIdentity::is_verified()` method

sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK < 2.8.0 allows the environment variabl

gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. `gix-path` can be tricked into running another

The product does not require unique and complex passwords to be created during installation. Using Philips's default pa

Dell Data Lakehouse, version(s) 1.0.0.0, contain(s) a Missing Encryption of Sensitive Data vulnerability in the DDAE (St

Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privile

Rapid7 InsightVM Console versions below 6.6.260 suffer from a protection mechanism failure whereby an attacker with netw

A partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type b