2024

Wire UI is a library of components and resources to empower Laravel and Livewire application development. A potential Cr

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Th

Contao is an Open Source CMS. In affected versions an untrusted user can inject insert tags into the canonical tag, whic

Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionali

Padding Oracle vulnerability in Apache Druid extension, druid-pac4j. This could allow an attacker to manipulate a pac4j

Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacke

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a ne

A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulner

A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affec

Under the default configuration, Devise-Two-Factor versions >= 2.2.0 & < 6.0.0 generate TOTP shared secrets that are 120

There is a command injection vulnerability that may allow an attacker to inject malicious input on the device's operatin

Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitatio

Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of t

An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability all

The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Serve

The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious acto

This vulnerability occurs when user-supplied input is improperly sanitized and then reflected back to the user's browser

A vulnerability was found in the ilab model serve component, where improper handling of the best_of parameter in the vll

A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, res

Improper Digital Signature Invalidation  vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows

Prior to the patched version, logged in users of Mautic are vulnerable to Relative Path Traversal/Arbitrary File Deletio

The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URL

An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious li

Incorrect Privilege Assignment vulnerability in favethemes Houzez allows Privilege Escalation.This issue affects Houzez:

Privilege Escalation vulnerability in favethemes Houzez Login Register houzez-login-register.This issue affects Houzez L

Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application whic

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a t

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escapi

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_mana

FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_mana

A vulnerability in the FAISS.deserialize_from_bytes function of langchain-ai/langchain allows for pickle deserialization

Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected

The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. Thi

The PropertyHive plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which cou

The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisa

The Enhanced Search Box WordPress plugin through 0.6.1 does not have CSRF check in place when updating its settings, whi

The Review Ratings WordPress plugin through 1.6 does not have CSRF check in some places, and is missing sanitisation as

The Special Feed Items WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisati

The Visual Sound (old) WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which

The infolinks Ad Wrap WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which

The Vikinghammer Tweet WordPress plugin through 0.2.4 does not have CSRF check in some places, and is missing sanitisati

The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which c

Denial of Service (DoS) vulnerability has been found in Dual-redundant Platform for Computer. If a computer on which the

A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious

A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Pla

An authentication issue was addressed with improved state management. This issue is fixed in Safari 18, iOS 18 and iPadO

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 18 and iPadOS 18, macOS

This issue was addressed through improved state management. This issue is fixed in Xcode 16, iOS 17.7 and iPadOS 17.7, i