2024

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Stored Cross-Site Scrip

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Vi

A vulnerability in a password management API in Brocade Fabric OS versions before v9.2.1, v9.2.0b, v9.1.1d, and v8.2.3e

A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session pas

Stored Cross Site Scripting vulnerability in Emby Media Server Emby Media Server 4.8.3.0 allows a remote attacker to esc

HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbi

In WhatsUp Gold versions released before 2023.1.3,  an unauthenticated Arbitrary File Read issue exists in Wug.UI.Areas

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Path Traversal vulnerability exists Wug.UI.Areas.W

In WhatsUp Gold versions released before 2023.1.3, a path traversal vulnerability exists. A specially crafted unauthenti

An issue in Daemon PTY Limited FarCry Core framework before 7.2.14 allows attackers to access sensitive information in t

An issue was discovered in VirtoSoftware Virto Kanban Board Web Part before 5.3.5.1 for SharePoint 2019. There is /_layo

Geehy APM32F103CCT6, APM32F103RCT6, APM32F103RCT7, and APM32F103VCT6 devices have Incorrect Access Control.

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when ass

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users are able to see b

A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expres

MAP-OS 4.45.0 and earlier is vulnerable to Cross-Site Scripting (XSS). This vulnerability allows malicious users to inse

Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potent

In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix a possible null pointer dereference in

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/qcom/lmh: Check for SCM availabilit

In the Linux kernel, the following vulnerability has been resolved: media: mgb4: Fix double debugfs remove Fixes an er

In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix notifier list entry init st

In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Assign ->num before accessing ->hws

In the Linux kernel, the following vulnerability has been resolved: io_uring: check for non-NULL file pointer in io_fil

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix uninit-value in p9_client_rpc() Syzbot

In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix handling of dissolved but no

In the Linux kernel, the following vulnerability has been resolved: bonding: fix oops during rmmod "rmmod bonding" cau

In the Linux kernel, the following vulnerability has been resolved: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xa

In the Linux kernel, the following vulnerability has been resolved: s390/ap: Fix crash in AP internal function modify_b

The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server m

VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a v

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) per

In the Linux kernel, the following vulnerability has been resolved: media: lgdt3306a: Add a check against null-pointer-

The The7 — Website and eCommerce Builder for WordPress theme for WordPress is vulnerable to Stored Cross-Site Scripting

A buffer overflow in PX4-Autopilot v1.12.3 allows attackers to cause a Denial of Service (DoS) via a crafted MavLink mes

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic WordPress all

Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any s

Lack of consideration of key expiry when validating signatures in Conduit, allowing an attacker which has compromised an

Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic

Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows users

Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute

WordPress Core is vulnerable to Stored Cross-Site Scripting via the HTML API in various versions prior to 6.5.5 due to i

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

The Zita Elementor Site Library plugin for WordPress is vulnerable to unauthorized modification of data due to a missing

The Mime Types Extended WordPress plugin through 0.11 does not sanitise uploaded SVG files, which could allow users with

Incorrect Default Permissions vulnerability in Hitachi Storage Provider for VMware vCenter allows local users to read an

Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands.