2024

Deserialization of Untrusted Data vulnerability in Webextends Telecash Ricaricaweb telecash-ricaricaweb allows Object In

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Deserialization of Untrusted Data vulnerability in Boyan Raichev IP Loc8 ip-loc8 allows Object Injection.This issue affe

Unrestricted Upload of File with Dangerous Type vulnerability in xaraartech External featured image from bing external-f

Deserialization of Untrusted Data vulnerability in GMRobbins Disc Golf Manager disc-golf-manager allows Object Injection

Unrestricted Upload of File with Dangerous Type vulnerability in THATplugin Iconize iconize.This issue affects Iconize:

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Danish Ali Malik Top Bar

Relative Path Traversal vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Path Traversal.Th

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The CSSIgniter Team MaxS

Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker t

The OBS service obs-service-download_url was vulnerable to a command injection vulnerability. The attacker could provide

A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption confi

A vulnerability has been identified within Rancher that can be exploited in narrow circumstances through a man-in-the-m

Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalat

Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Ad

Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting azz-anonim-posting allows Uplo

Authentication Bypass Using an Alternate Path or Channel vulnerability in SK BuddyPress Better Registration better-bp-re

Deserialization of Untrusted Data vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows

A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. This

A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0. This vulnerability aff

A vulnerability has been identified whereby privilege escalation checks are not properly enforced for RoleTemplateobject

A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no matt

A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in Norman's public API endpoint

A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in the API Server's public API

When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-s

The WooCommerce Smart Coupons plugin for WordPress is vulnerable to authorization bypass due to a missing capability che

An authorization bypass through user-controlled key vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R

A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEX

A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an u

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as critical. Affected by th

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file opera

The Zita Elementor Site Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads i

The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File up

There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windo

A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a

A vulnerability has been identified in which Rancher does not automatically clean up a user which has been deleted from

The Sina Extension for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up

The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary sho

The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to exis

Application is vulnerable to Cross Site Scripting (XSS) an authenticated attacker with users’ permissions can modify a v

SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible dependi

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This

Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing

The logout operation in the CloudStack web interface does not expire the user session completely which is valid until ex

The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources,

Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and v

Insecure Default Initialization of Resource vulnerability in Apache Solr. New ConfigSets that are created via a Restore

Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enable

The BigBlueButton plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the moderator code and viewe