2024

Monica AI Assistant desktop application v2.3.0 is vulnerable to Exposure of Sensitive Information to an Unauthorized Act

Projectworld Online Voting System Version 1.0 is vulnerable to Cross Site Request Forgery (CSRF) via voter.php. This vul

A Cross Site Scripting (XSS) vulnerability in update_contact.php of Blood Bank and Donation Management System v1.0 allow

A Cross Site Scripting (XSS) vulnerability in add_donor.php of Blood Bank And Donation Management System 1.0 allows an a

The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It is advised to not use sensitive information in c

The goTenna Pro ATAK Plugin does not use SecureRandom when generating passwords for sharing cryptographic keys. The ran

The goTenna Pro ATAK plugin uses a weak password for sharing encryption keys via the key broadcast method. If the broad

Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 1.3.0, given a

The goTenna Pro ATAK Plugin's default settings are to share Automatic Position, Location, and Information (PLI) updates

In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This a

The goTenna Pro ATAK Plugin uses AES CTR type encryption for short, encrypted messages without any additional integrity

The goTenna Pro ATAK Plugin encryption key name is always sent unencrypted when the key is sent over RF through a broad

In the goTenna Pro ATAK Plugin there is a vulnerability that makes it possible to inject any custom message with any GI

The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of message

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of

A vulnerability, which was classified as problematic, has been found in Enpass Password Manager up to 6.9.5 on Windows.

The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilit

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests.

A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user

A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via u

A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user inte

A host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the password reset token via us

An information disclosure vulnerability in the /Letter/PrintQr/ endpoint of Solvait v24.4.2 allows attackers to access s

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x,10.5.3.x, contains an Uncontrolled Resource Consum

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin f

A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may

Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function.

A Cross-Site Request Forgery (CSRF) vulnerability exists in kishan0725's Hospital Management System version 6.3.5. The v

IBM ManageIQ could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specia

In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an updat

aimeos/ai-controller-frontend is the Aimeos frontend controller package for e-commerce projects. Prior to versions 2024.

Mattermost versions 9.10.x <= 9.10.1, 9.9.x <= 9.9.2, 9.5.x <= 9.5.8 fail to limit access to channels files that have no

The HCL Traveler for Microsoft Outlook executable (HTMO.exe) is being flagged as potentially Malicious Software or an Un

The Themedy Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's themedy_col, them

VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun

VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object.

VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts,

An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a dir

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated user

IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored

Incorrect Authorization vulnerability in National Keep Cyber Security Services CyberMath allows Accessing Functionality

Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath all

Multiple plugins and/or themes for WordPress are vulnerable to Limited File Upload in various versions. This is due to a

The Advanced File Manager plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, a

The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads via the 'class_fma_connector.php'

Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the

Vulnerability in Clibo Manager v1.1.9.1 that could allow an attacker to execute an stored Cross-Site Scripting (stored X

The GF Custom Style plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versio

The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘alignment’ parameter i