2024

The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make use

The Snippet Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of

Improper Validation of Array Index vulnerability in Samsung Open Source Walrus Webassembly runtime engine allows a segme

A vulnerability was found in itsourcecode Farm Management System 1.0. It has been declared as critical. Affected by this

SkillTree is a micro-learning gamification platform. Prior to version 2.12.6, the endpoint `/admin/projects/{projectnam

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 202

aimeos/ai-admin-jsonadm is the Aimeos e-commerce JSON API for administrative tasks. In versions prior to 2020.10.13, 202

A vulnerability classified as critical was found in linlinjava litemall up to 1.8.0. Affected by this vulnerability is a

Pomerium is an identity and context-aware access proxy. Prior to version 0.26.1, the Pomerium user info page (at `/.pome

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driv

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driv

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. T

The bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function

In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoin

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulner

Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.5, Regular Expression De

Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.7.0 allows local attackers to cause a Windows blue sc

Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue sc

Under certain circumstances the web interface users credentials may be recovered by an authenticated user.

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen

Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue sc

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen

Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue sc

A stored cross-site scripting (XSS) vulnerability exists in ResidenceCMS 2.10.1 that allows a low-privilege user to crea

Under certain circumstances unnecessary user details are provided within system logs

Under certain circumstances the Linux users credentials may be recovered by an authenticated user.

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/info_deal.php?mudi=rev&nohrefStr=cl

A vulnerability was found in ORIPA up to 1.72. It has been declared as critical. Affected by this vulnerability is an un

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0. It has been classified as crit

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0 and classified as critical. Thi

A vulnerability has been found in Hitout Carsale 1.0 and classified as critical. This vulnerability affects unknown code

The Post Meta Data Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘$meta_key’ paramet

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthenticated bypass to user registration

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized user registration due to a miss

The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap

The Cost Calculator Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textarea.descript

Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows loca

Improper verification of intent by broadcast receiver vulnerability in Samsung Flow prior to version 4.9.13.0 allows loc

Improper input validation in Tips prior to version 6.2.9.4 in Android 14 allows local attacker to send broadcast with Ti

Improper input validation in Samsung Health prior to version 6.27.0.113 allows local attackers to write arbitrary docume

Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for

Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read ker

Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attacke

Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 all

Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 all

Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers

Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers