2024

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Action Pack is a framework for handling and responding to web requests. Starting in version 3.1.0 and prior to versions

Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allow

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allow

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD

A cross-site scripting (XSS) vulnerability in the component /admin.php?page=photo of Piwigo v14.5.0 allows attackers to

A cross-site scripting (XSS) vulnerability in the component /admin.php?page=album of Piwigo v14.5.0 allows attackers to

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when process

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a p

An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) c

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could al

A vulnerability in the web-based management interface of Cisco ATA 190 Series Multiplatform Analog Telephone Adapter fir

A vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated,

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could al

A vulnerability in the web-based management interface of Cisco ATA 190 Multiplatform Series Analog Telephone Adapter fir

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could al

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could al

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could al

A vulnerability in the backup feature of Cisco UCS Central Software could allow an attacker with access to a backup file

A vulnerability was found in aap-gateway. A Cross-site Scripting (XSS) vulnerability exists in the gateway component. Th

Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclu

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SPBooking.com Book

On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device beco

Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in sunburntkam

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nayon46 Unlimited

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thimo Grauerholz W

A Reflected Cross Site Scripting (XSS) vulnerability was found in /trms/listed- teachers.php in PHPGurukul Teachers Reco

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility that

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdow

The Nextend Social Login Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and incl

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hashthemes Smart B

Unrestricted Upload of File with Dangerous Type vulnerability in Limbcode WordPress Gallery Plugin – Limb Image Gallery

Path Traversal: '.../...//' vulnerability in Limbcode WordPress Gallery Plugin – Limb Image Gallery limb-gallery.This is

Improper Control of Generation of Code ('Code Injection') vulnerability in sunjianle ajax-extend ajax-extend allows Code

Relative Path Traversal vulnerability in JamesPark.ninja Analyse Uploads analyse-uploads allows Relative Path Traversal.

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in VaultDweller Leyka leyka.Thi

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in nahimsalami Ahime Image

Unrestricted Upload of File with Dangerous Type vulnerability in Shafiq Digital Lottery digital-lottery allows Upload a

Deserialization of Untrusted Data vulnerability in foter Free Stock Photos Foter free-stock-photos-foter allows Object I

Deserialization of Untrusted Data vulnerability in taketin TAKETIN To WP Membership taketin-to-wp-membership allows Obje

Deserialization of Untrusted Data vulnerability in Al Imran Akash Recently recently-viewed-most-viewed-and-sold-products

Unrestricted Upload of File with Dangerous Type vulnerability in jclay06 Feed Comments Number feed-comments-number allow

Unrestricted Upload of File with Dangerous Type vulnerability in takayukii ACF Images Search And Insert acf-images-searc

Unrestricted Upload of File with Dangerous Type vulnerability in fliperrr Creates 3D Flipbook, PDF Flipbook create-flipb