2024

A vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V05.30). The affected dev

A vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10

IBM Carbon Design System (Carbon Charts 0.4.0 through 1.13.16) is vulnerable to cross-site scripting. This vulnerability

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versio

The iChart – Easy Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ pa

The Simple Restrict plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and incl

The Quran multilanguage Text & Audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'soura

The Email Reminders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all vers

SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software b

The Property Hive Mortgage Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘price’

The System Dashboard WordPress plugin before 2.8.15 does not sanitise and escape some parameters when outputting them in

The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high

SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to gain higher access level

Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which lead

SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated us

An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment.

An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file

Under certain conditions SAP BusinessObjects Business Intelligence platform allows an attacker to access information whi

A reflected cross-site scripting (XSS) vulnerability exists in PaperCut NG/MF. This issue can be used to execute special

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core

A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc

Altair is a GraphQL client for all platforms. Prior to version 8.0.5, Altair GraphQL Client's desktop app does not valid

Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edi

eLabFTW is an open source electronic lab notebook for research labs. A vulnerability has been found starting in version

AMI (aka American Megatrends) NTFS driver 1.0.0 (fixed in late 2021 or early 2022) has a buffer overflow. This driver is

A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message_teacher_to_student.php of kashipara E-learn

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor c

Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper input validation vulnerability.

Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains an improper access control vulnerability. A

Cross Site Scripting vulnerability in Xunrui CMS Public Edition v.4.6.1 allows a remote attacker to execute arbitrary co

A Stored Cross Site Scripting (XSS ) was found in /teacher_avatar.php of kashipara E-learning Management System v1.0. Th

Dell PowerScale OneFS Versions 8.2.2.x through 9.9.0.x contain an incorrect specified argument vulnerability. A remote l

Dell PowerScale OneFS Versions 8.2.2.x through 9.8.0.x contain an improper resource unlocking vulnerability. A remote lo

Dell PowerScale OneFS Versions 9.5.0.x through 9.8.0.x contain an uncontrolled resource consumption vulnerability. A low

Dell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability. A remote low-privileged attacker co

Motoko's incremental garbage collector is impacted by an uninitialized memory access bug, caused by incorrect use of wri

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, may force an Out-of-Bounds Write vulnerability. A

A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to acc

A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message.php of Kashipara E-learning Management Syst

Missing Authorization vulnerability in thehp AIO Contact aio-contact.This issue affects AIO Contact: from n/a through <=

Improper Authorization vulnerability in Apache Superset when FAB_ADD_SECURITY_API is enabled (disabled by default). Allo

Generation of Error Message Containing analytics metadata Information in Apache Superset. This issue affects Apache Sup

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Adnan Analytify wp-analytify

Missing Authorization vulnerability in Astoundify Jobify jobify.This issue affects Jobify: from n/a through < 4.3.0.

Missing Authorization vulnerability in Genetech Pie Register Premium.This issue affects Pie Register Premium: from n/a b

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from n

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blazethemes News K