2024

Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulner

Stellar-core is a reference implementation for the peer-to-peer agent that manages the Stellar network. Prior to 20.4.0,

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Below 0.13.2 Release, whe

Missing Authorization vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0.

SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalatio

Missing Authorization vulnerability in WP Club Manager WP Club Manager wp-club-manager.This issue affects WP Club Manage

Missing Authorization vulnerability in WPDeveloper SchedulePress.This issue affects SchedulePress: from n/a through 5.0.

A Segmentation Fault issue discovered in Samsung Open Source Escargot JavaScript engine allows remote attackers to c

Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. Howe

HDF5 Library through 1.14.3 has a SEGV in H5T_close_real in H5T.c, resulting in a corrupted instruction pointer.

HDF5 Library through 1.14.3 has a SEGV in H5A__close in H5Aint.c, resulting in the corruption of the instruction pointer

HDF5 Library through 1.14.3 may attempt to dereference uninitialized values in h5tools_str_sprint in tools/lib/h5tools_s

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service (DoS) vulnerabili

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Easy Digital Downloads.This issue affects Ea

An issue was discovered in Samsung Magician 8.0.0 on macOS. Because it is possible to tamper with the directory and exec

An issue was discovered in Samsung Magician 8.0.0 on macOS. Because symlinks are used during the installation process, a

Buffer Overflow vulnerability in emp-ot v.0.2.4 allows a remote attacker to execute arbitrary code via the FerretCOT<T>:

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data store

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data store

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, some of the data store

Cacti provides an operational monitoring and fault management framework. Prior to 1.2.27, some of the data stored in `fo

Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: fro

SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execu

Cacti provides an operational monitoring and fault management framework. A reflected cross-site scripting vulnerability

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in R

Microsoft Edge (Chromium-based) Spoofing Vulnerability

The Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) plugin f

The Visual Footer Credit Remover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'selector' pa

The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate wid

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's access control mechanism fails to properly res

An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.7, all versions starting from 16.10 befo

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 prior to 16.9.7, starting from 1

A stored Cross-Site Scripting (XSS) vulnerability exists in the parisneo/lollms-webui application due to improper valida

Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 contain a res

HDF5 through 1.14.3 contains a buffer overflow in H5O__linfo_decode, resulting in the corruption of the instruction poin

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4, and 8.0

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 dashboard is vulnerable to a denial

A crafted network packet may cause a buffer overrun in Wind River VxWorks 7 through 23.09.

In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subject_name= parameter, enabling

Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting (XSS) via add-task.php?task_name=.

A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in

This issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5

This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Son

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tv

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Mon

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.