2024

An Improper Handling of Exceptional Conditions vulnerability in the rpd-server of Juniper Networks Junos OS and Junos OS

An Incorrect Default Permissions vulnerability in the command line interface (CLI) of Juniper Networks Junos OS Evolved

An Incorrect Comparison vulnerability in the local address verification API of Juniper Networks Junos OS Evolved allows

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the command-line interface (CLI) of Junip

An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Ser

A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code wi

A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker t

A DLL hijack vulnerability was reported in Lenovo Personal Cloud that could allow a local attacker to execute code with

A DLL hijack vulnerability was reported in Lenovo Baiying that could allow a local attacker to execute code with elevate

A DLL hijack vulnerability was reported in Lenovo Leyun that could allow a local attacker to execute code with elevated

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.This

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to n

Plane is an open-source project management tool. Plane uses the ** wildcard support to retrieve the image from any hostn

DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When h2o is configured as a reverse proxy and HTTP/3

Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. When parsi

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When an HTTP request using TLS/1.3 early data on top

Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attac

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The configuration directives provided by the headers

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentialit

CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Exp

CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data whe

A denial of service may be caused to a single peripheral device in a BLE network when multiple central devices continuo

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8. It has been rated as problematic. Affected by this

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8. It has been declared as critical. Affected by this

The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing ca

The BlockMeister – Block Pattern Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the

The Increase upload file size & Maximum Execution Time limit plugin for WordPress is vulnerable to Reflected Cross-Site

The Language Switcher plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_a

The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o

The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o

The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

The ShopLentor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including

The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form buil

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulner

The Embed videos and respect privacy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'v' pa

The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerabl

The Download Plugins and Themes in ZIP from Dashboard plugin for WordPress is vulnerable to Reflected Cross-Site Scripti

The Tainacan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg withou

The FULL – Cliente plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg

An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9, starting from 17.3, prio

The WP Ultimate Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpupg-grid-

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.6 prior to 17.2.9, starting from 17.3 pr

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre

The WordPress Comments Import & Export plugin for WordPress is vulnerable to to arbitrary file read due to insufficient

A path traversal vulnerability exists in the parisneo/lollms-webui repository, specifically in the `lollms_file_system.p

An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 11.4 before 17.2.9, all ver

Snipe-IT before 7.0.10 allows remote code execution (associated with cookie serialization) when an attacker knows the AP

A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier allow

The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12