2024

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via RSVP name field in all ver

Products for macOS enables a user logged on to the system to perform a denial-of-service attack, which could be misused

Cross-site scripting vulnerability exists in MF Teacher Performance Management System version 6. If this vulnerability i

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traff

In Logmanager service, there is a possible missing verification incorrect input. This could lead to local escalation of

In drm service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of

In drm service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote deni

In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote den

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read

The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's osm_map and o

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Medi

The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to time-based SQL Injection via

The Absolute Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Name' field of a custom

The Product Enquiry for WooCommerce, WooCommerce product catalog plugin for WordPress is vulnerable to PHP Object Inject

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 lacks sufficient access controls

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 discloses the Open AI API Key, al

Sharp NEC Projectors (NP-CB4500UL, NP-CB4500WL, NP-CB4700UL, NP-P525UL, NP-P525UL+, NP-P525ULG, NP-P525ULJL, NP-P525WL,

Information disclosure in Gitlab EE/CE affecting all versions from 15.6 prior to 17.2.8, 17.3 prior to 17.3.4, and 17.4

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to

CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality inclu

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libpp

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the for

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via t

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via t

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via t

A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Win

A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs wh

Vault’s SSH secrets engine did not require the valid_principals list to contain a value by default. If the valid_princip

Shields.io is a service for concise, consistent, and legible badges in SVG and raster format. Shields.io and users self-

RSSHub is an RSS network. Prior to commit 64e00e7, RSSHub's `docker-test-cont.yml` workflow is vulnerable to Artifact Po

Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbP

In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to writ

Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.2

Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions p

Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions p

Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions p

The goTenna Pro App allows unauthenticated attackers to remotely update the local public keys used for P2P and group me

The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This

The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast m

In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Ca

The goTenna Pro App does not use SecureRandom when generating passwords for sharing cryptographic keys. The random func

The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages.

The goTenna Pro App does not encrypt callsigns in messages. It is recommended to not use sensitive information in calls

The goTenna Pro App uses AES CTR type encryption for short, encrypted messages without any additional integrity checkin

In the goTenna Pro App, the encryption keys are stored along with a static IV on the End User Device (EUD). This allows

The goTenna Pro App uses a weak password for sharing encryption keys via the key broadcast method. If the broadcasted e

LayUI is a native minimalist modular Web UI component library. Versions prior to 2.9.17 have a DOM Clobbering vulnerabil