2024

The Spotlightr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spotlightr-v' shortco

The استخراج محصولات ووکامرس برای آیسی plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the us

The Page Restriction WordPress (WP) – Protect WP Pages/Post plugin for WordPress is vulnerable to Sensitive Information

The WordPress Button Plugin MaxButtons WordPress plugin before 9.8.1 does not sanitise and escape some of its settings,

Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a re

The Serious Slider WordPress plugin before 1.2.7 does not validate and escape some of its shortcode attributes before ou

The Download Manager WordPress plugin before 3.3.03 does not sanitise and escape some of its settings, which could allow

The WordPress Button Plugin MaxButtons WordPress plugin before 9.8.1 does not sanitise and escape some of its settings,

Versions of the package spatie/browsershot before 5.0.3 are vulnerable to Improper Input Validation due to improper URL

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. A person with phy

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to r

This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageB

The PCRecruiter Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'PCRecruit

Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause device

There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulnera

There is a command injection vulnerability in Huawei terminal printer product. Successful exploitation could result in t

Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace thr

There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerabili

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.

Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This vulnerability allows remo

Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local

Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows rem

Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remo

pyrage is a set of Python bindings for the rage file encryption library (age in Rust). `pyrage` uses the Rust `age` crat

An issue was discovered in the Webmail Classic UI in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A Local File Incl

Remote authentication bypass vulnerability in HPE Alletra Storage MP B10000 in versions prior to version 10.4.5 could be

There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to up

An issue in Quectel BG96 BG96MAR02A08M1G allows attackers to bypass authentication via a crafted NAS message. NOTE: this

An issue in Quectel BC95-CNV V100R001C00SPC051 allows attackers to bypass authentication via a crafted NAS message.

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS

A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fin

A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sopho

A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than versi

A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (

A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the

Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat

Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow

A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the

Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow. This buffer overflow tr

An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed

The L2CAP receive data buffer for L2CAP packets is restricted to packet sizes smaller than the maximum supported packet

Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances confi

Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affect

Discourse is an open source platform for community discussion. Moderators can see the Screened emails list in the admin