2024

The WP jQuery Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ attribute in al

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user preferences.

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPre

The GDPR CCPA Compliance & Cookie Consent Banner plugin for WordPress is vulnerable to unauthorized modification of data

The WP Mobile Menu – The Mobile-Friendly Responsive Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripti

The Clever Fox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's info box block in all

The WooCommerce Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit

The Clever Fox – One Click Website Importer by Nayra Themes plugin for WordPress is vulnerable to unauthorized modificat

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected.

A bug exists in the API, mesh_node_power_off(), which fails to copy the contents of the Replay Protection List (RPL) fr

A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HT

dnspod-sr 0dfbd37 contains a SEGV.

dnspod-sr 0dfbd37 is vulnerable to buffer overflow.

Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access URLs and directories em

In h2oai/h2o-3 version 3.40.0.4, an exposure of sensitive information vulnerability exists due to an arbitrary system pa

A Cross-site Scripting (XSS) vulnerability exists in the SAML metadata endpoint `/auth/saml/${org?.id}/metadata` of luna

gaizhenbiao/chuanhuchatgpt is vulnerable to an unrestricted file upload vulnerability due to insufficient validation of

In lunary-ai/lunary version 1.2.5, an improper access control vulnerability exists due to a missing permission check in

A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to

An Improper Access Control vulnerability exists in the lunary-ai/lunary repository, affecting versions up to and includi

An improper access control vulnerability exists in the lunary-ai/lunary repository, specifically within the versions.pat

A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update' pr

In gaizhenbiao/chuanhuchatgpt, specifically the version tagged as 20240121, there exists a vulnerability due to improper

A stored Cross-Site Scripting (XSS) vulnerability existed in version (20240121) of gaizhenbiao/chuanhuchatgpt due to ina

mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint

A JSON Injection vulnerability exists in the `mintplex-labs/anything-llm` application, specifically within the username

A vulnerability in mlflow/mlflow version 2.11.1 allows attackers to create multiple models with the same name by exploit

Ariane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows physically proximate attac

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate tokens that have not y

OneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter is floating.

A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langchain-ai/langchain` repository,

A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failu

A stored Cross-Site Scripting (XSS) vulnerability was identified in the zenml-io/zenml repository, specifically within t

An improper authorization vulnerability exists in the zenml-io/zenml repository, specifically within the API PUT /api/v1

The file upload feature in OTRS and ((OTRS)) Community Edition has a path traversal vulnerability. This issue permits au

IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remo

Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows n

Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability. This vulnerability allows ne

In lunary-ai/lunary versions 1.2.2 through 1.2.25, an improper access control vulnerability allows users on the Free pla

An improper access control vulnerability exists in lunary-ai/lunary versions up to and including 1.2.2, where an admin c

The SuluFormBundle adds support for creating dynamic forms in Sulu Admin. The TokenController get parameter formName is

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access t

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It’s possible for authenticated users to enume

An attacker with access to the private network (the charger is connected to) or local access to the Ethernet-Interface c

The Wbcom Designs – Custom Font Uploader plugin for WordPress is vulnerable to unauthorized loss of data due to a missin

Vulnerability in Dulldusk's PHP File Manager affecting version 1.7.8. This vulnerability consists of an XSS through the

The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validi

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress