2024

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in digitalnatu

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wayneconnor

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Podlove Pod

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in highwarden Super S

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pagelayer T

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sunshinephotocart

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SureCart al

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations R

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LikeBtn Like Butto

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Johan van der Wijk

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations V

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Gutenber

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM Mar

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Ma

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT T

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arni Cinco WPCargo

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super S

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters Name

Windows Kernel Information Disclosure Vulnerability

Next.js is a React framework for building full-stack web applications. By sending a crafted HTTP request, it is possible

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not su

Inappropriate implementation in UI in Google Chrome on iOS prior to 129.0.6668.58 allowed a remote attacker to perform U

Inappropriate implementation in Autofill in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to perform UI

Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who

Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a use

Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially expl

Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit heap corru

Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs

Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDoc

Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstag

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vu

Vite a frontend build tooling framework for javascript. Affected versions of vite were discovered to contain a DOM Clobb

Vite a frontend build tooling framework for javascript. In affected versions the contents of arbitrary files can be retu

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute alert rul

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user is

Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the docume

Contao is an Open Source CMS. In affected versions a back end user with access to the file manager can upload malicious

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown

A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function m

A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an

A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umo

An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigation

Concrete CMS versions 9.0.0 through 9.3.3 are affected by a stored XSS vulnerability in the "Top Navigator Bar" block. S