2024

Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may all

Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to co

Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay approach.

Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via

Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.

Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.

A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convi

A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerabi

Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers c

An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows inform

Mattermost Mobile Apps versions <=2.16.0 fail to validate that the push notifications received for a server actually cam

Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject Jav

Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS cou

An incorrect privilege assignment vulnerability in the inline editing functionality of OTRS can lead to privilege escala

In Apache Linkis =1.4.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql

AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regul

The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect W

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputtin

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputtin

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputtin

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not escape the $_SERVER['REQUEST_URI'] parameter bef

The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote att

The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers t

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to traverse directories on the

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 displays version information in HTTP requests that could all

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability al

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive inform

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to server-side request forgery (SSRF). This ma

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to obtain sensitive informatio

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper v

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 uses weaker than expected cryptographic algorithms that coul

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to stored cross-site scripting. This vulnerabi

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as crit

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulner

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affe

A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this i

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. This

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0.

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 stores user credentials in plain clear text which can be rea

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 temporarily stores data from different environments that cou

A vulnerability was found in Nanjing Xingyuantu Technology SparkShop up to 1.1.6. It has been rated as critical. This is

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been declared as c

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affe

The WP Links Page plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch

The Laposta plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.12. This

The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not sanitise and escape some of its setti

The wp-eMember WordPress plugin before 10.6.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it

The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not escape the $_SERVER['REQUEST_URI'] pa

The Tournamatch WordPress plugin before 4.6.1 does not sanitise and escape some of its settings, which could allow high