2024

Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting (XSS) via the budget parameter.

A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 (SaaS) and 7.84.7 (Self-Hosted) may allo

ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an autho

The Mega Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in al

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerabili

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerabili

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerabili

The Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF plugin for WordPress is vulnerable to Stored Cr

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check in place when resetting its settings,

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and escape a parameter before outputting it

The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in u

The SP Project & Document Manager WordPress plugin through 4.71 is missing validation in its upload function, allowing a

The month name translation benaceur WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, whi

The HL Twitter WordPress plugin through 2014.1.18 does not have CSRF check when unlinking twitter accounts, which could

The HL Twitter WordPress plugin through 2014.1.18 does not sanitise and escape some of its settings, which could allow h

The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.1.2 does not sanitise and escape a parameter be

The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to ma

ITPison OMICARD EDM fails to properly filter specific URL parameter, allowing unauthenticated remote attackers to modif

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Si

The Gutenberg Blocks by Kadence Blocks – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site S

The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin se

The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Team Member

The Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elem

The Bulk Posts Editing For WordPress plugin for WordPress is vulnerable to unauthorized access of functionality due to a

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /homePro_deal.php?mudi=add&

A security issue was discovered in azure-file-csi-driver where an actor with access to the driver logs could observe ser

The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

The Visual Portfolio, Photo Gallery & Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

The Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease plugin for WordPress is vu

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable t

An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI pr

Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Success

Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Success

Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAP

Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI prot

sshpiper is a reverse proxy for sshd. Starting in version 1.0.50 and prior to version 1.3.0, the way the proxy protocol

In WhatsUp Gold versions released before 2023.1.2 , an SSRF vulnerability exists in Whatsup Gold's Issue exists in

In WhatsUp Gold versions released before 2023.1.2 , a blind SSRF vulnerability exists in Whatsup Gold's FaviconContro

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a d

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerabil

An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid

The `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing the move semantics for

An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vuln

When importing resources using Web Workers, error messages would distinguish the difference between `application/javascr

A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting per

If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the win

Different techniques existed to obscure the fullscreen notification in Firefox for Android. These could have led to pot

An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through