2024

WAVLINK WN551K1'live_check.shtml enables attackers to obtain sensitive router information.

WAVLINK WN551K1 found a command injection vulnerability through the start_hour parameter of /cgi-bin/nightled.cgi.

WAVLINK WN551K1'live_mfg.shtml enables attackers to obtain sensitive router information.

WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin/touchlist_sync.cgi.

An issue in Wavlink WN551K1 allows a remote attacker to obtain sensitive information via the ExportAllSettings.sh compon

An issue the background management system of Shanxi Internet Chuangxiang Technology Co., Ltd v1.0.1 allows a remote atta

Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows

Virtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a cross-site scripting (XSS) vulnerability via

Cross Site Scripting vulnerability in Anchor CMS v.0.12.7 allows a remote attacker to execute arbitrary code via a craft

Hangzhou Meisoft Information Technology Co., Ltd. FineSoft <=8.0 is affected by Cross Site Scripting (XSS) which allows

Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows

TruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery (CSRF) attack which would all

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Z

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryable

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileD

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. It discloses full pathname

An issue in EnvisionWare Computer Access & Reservation Control SelfCheck v1.0 (fixed in OneStop 3.2.0.27184 Hotfix May 2

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Only use reserved BCS instances for usm mig

In the Linux kernel, the following vulnerability has been resolved: fpga: manager: add owner module and take its refcou

In the Linux kernel, the following vulnerability has been resolved: fpga: bridge: add owner module and take its refcoun

In the Linux kernel, the following vulnerability has been resolved: fpga: region: add owner module and take its refcoun

In the Linux kernel, the following vulnerability has been resolved: PCI: of_property: Return error for int_map allocati

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Mia Technology Inc. Mia-Med Health Aplication allows S

Improper Authentication vulnerability in Play.Ht allows Accessing Functionality Not Properly Constrained by ACLs.This is

Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerabi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Next4Biz CRM & BPM

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser

The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contr

The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This a

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by

A vulnerability has been found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affect

A vulnerability, which was classified as critical, was found in lahirudanushka School Management System 1.0.0/1.0.1. Aff

A Cross-Site Request Forgery (CSRF) vulnerability exists in the XTTS server of parisneo/lollms version 9.6 due to a lax

A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1

A vulnerability classified as critical was found in lahirudanushka School Management System 1.0.0/1.0.1. This vulnerabil

A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affec

Click Studios Passwordstate Core before 9.8 build 9858 allows Authentication Bypass.

MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a

A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as problematic. Affected by

A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects the function

A vulnerability classified as critical has been found in Pear Admin Boot up to 2.0.2. Affected is an unknown function of

Apache Allura's neighborhood settings are vulnerable to a stored XSS attack.  Only neighborhood admins can access these

The ARMember Premium plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows a

The Bricks Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inc

This affects versions of the package opencart/opencart from 4.0.0.0. An Arbitrary File Creation issue was identified via

This affects versions of the package opencart/opencart from 4.0.0.0. A reflected XSS issue was identified in the redirec

This affects versions of the package opencart/opencart from 4.0.0.0 and before 4.1.0.0. A reflected XSS issue was identi

This affects versions of the package opencart/opencart from 4.0.0.0. A reflected XSS issue was identified in the filenam