2024

Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7

The Feeds for YouTube (YouTube video, channel, and gallery plugin) plugin for WordPress is vulnerable to Stored Cross-Si

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to

The Secure Copy Content Protection and Content Locking WordPress plugin before 4.0.9 does not sanitise and escape some o

The Slider by 10Web WordPress plugin before 1.2.56 does not sanitise and escape some of its Slide options, which could

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings,

The Bible Text WordPress plugin through 0.2 does not validate and escape some of its shortcode attributes before outputt

The Ultimate Blocks WordPress plugin before 3.1.9 does not validate and escape some of its block options before outputt

The Branda – White Label WordPress, Custom Login Page Customizer plugin for WordPress is vulnerable to Full Path Disclos

The Payflex Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap

A vulnerability has been found in witmy my-springsecurity-plus up to 2024-07-03 and classified as critical. Affected by

The Duplicator plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 1.5.9. T

Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the C

External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local

External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface al

A vulnerability classified as critical was found in mhuertos phpLDAPadmin up to 665dbc2690ebeb5392d38f1fece0a654225a0b38

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Jun

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Ju

An Improper Check for Unusual or Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS

An Unchecked Return Value vulnerability in the Routing Protocol Daemon (rpd) on Juniper Networks Junos OS and Juniper Ne

An Uncontrolled Resource Consumption vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Network

A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow

A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability the Routin

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon (l2ald) on

An Improper Check or Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Ne

An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved al

An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allow

An Improper Input Validation vulnerability in the 802.1X Authentication (dot1x) Daemon of Juniper Networks Junos OS allo

A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning

Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5

CodiMD allows realtime collaborative markdown notes on all platforms. CodiMD before 2.5.4 is missing authentication and

An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The bootrom function respon

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as pro

An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write admin

Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScale

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track

Decidim is a participatory democracy framework. The admin panel is subject to potential XSS attach in case the attacker

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City go

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Croogo up to 4.0.7. This affect

A vulnerability was found in Netgear WN604 up to 20240710. It has been rated as problematic. Affected by this issue is s

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FileBird Document Library.This is

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pauple Table & Contact Form 7 Database – Tab

Insertion of Sensitive Information into Log File vulnerability in TrustedLogin TrustedLogin Vendor.This issue affects Tr

Insertion of Sensitive Information into Log File vulnerability in SERVIT Software Solutions.This issue affects affiliate

A vulnerability was found in WuKongOpenSource Wukong_nocode up to 20230807. It has been declared as critical. Affected b

A vulnerability was found in zmops ArgusDBM up to 0.1.0. It has been classified as critical. Affected is the function ge

ServiceNow has addressed a sensitive file read vulnerability that was identified in the Washington DC, Vancouver, and Ut

A vulnerability was found in Tenda AX1806 1.0.0.1. Affected by this issue is the function formSetRebootTimer of the file