2024

Xbox Gaming Services Elevation of Privilege Vulnerability

An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code execution.

Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. In versions 0.1

OAuthenticator provides plugins for JupyterHub to use common OAuth providers, as well as base classes for writing one's

A Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices. When sending a certain

A vulnerability was found in Tenda AC10U 15.03.06.48. It has been rated as critical. Affected by this issue is the funct

A vulnerability was found in Tenda AC10U 15.03.06.49. It has been declared as critical. Affected by this vulnerability i

A vulnerability was found in Tenda AC10U 15.03.06.49. It has been classified as critical. Affected is the function fromS

A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical. This issue affects the function formexe

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49. This affects the function formW

A vulnerability, which was classified as critical, has been found in Tenda AC10U 1.0/15.03.06.49. Affected by this issue

Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap c

Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit ob

A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49. Affected by this vulnerability is the funct

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49. Affected is the function formSetDevice

latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PB

Unit4 Financials by Coda versions prior to 2023Q4 suffer from an incorrect access control authorization bypass vulnerabi

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbi

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A path

Firebird is a relational database. Versions 4.0.0 through 4.0.3 and version 5.0 beta1 are vulnerable to a server crash w

An issue in MyPrestaModules ordersexport v.6.0.2 and before allows a remote attacker to execute arbitrary code via the d

In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a remot

In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local

Deserialization of Untrusted Data vulnerability in Social Media Share Buttons By Sygnoos Social Media Share Buttons.This

Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ulti

The UX Flat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all

The Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring plugin fo

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary cod

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary cod

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary cod

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary cod

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary cod

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary cod

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary cod

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Cleartext passwords and hashes

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated directory list

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Directory traversal can occur

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Privilege escalation can occur

The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using t

The Appointment Booking Calendar WordPress plugin before 1.3.83 does not have CSRF checks in some places, which could al

The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPr

A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3.

A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been declared as critical. Affected by this vul

Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via t

UBEE DDW365 XCNDDW365 8.14.3105 software on hardware 3.13.1 allows a remote attacker within Wi-Fi proximity to conduct s

A multiple Cross-site scripting (XSS) vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endp

Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use malic

Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attac

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Easy

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maciej Bis Permali