2024

SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php.

SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php.

Improper sanitization of the value of the [srcset] attribute in <source> HTML elements in AngularJS allows attackers to

Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source

Rapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing authorization issues wher

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secr

Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "<" followed by

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authent

D-Link DI-8100 v16.07.26A1 has a stack overflow vulnerability in the dbsrv_asp function.

This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on c

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk

A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document con

Improper authorization in handler for custom URL scheme issue in "@cosme" App for Android versions prior 5.69.0 and "@co

The Pocket Widget WordPress plugin through 0.1.3 does not sanitise and escape some of its settings, which could allow hi

The Snapshot Backup WordPress plugin through 2.1.1 does not have CSRF check in some places, and is missing sanitisation

The AZIndex WordPress plugin through 0.8.1 does not have CSRF checks in some places, which could allow attackers to make

The AZIndex WordPress plugin through 0.8.1 does not have CSRF check in some places, and is missing sanitisation as well

The EventON WordPress plugin before 2.2.17 does not sanitise and escape some of its settings, which could allow high pri

The Popup Maker WordPress plugin before 1.19.1 does not sanitise and escape some of its settings, which could allow hig

Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an

WebITR from Uniong has an Open Redirect vulnerability, which allows unauthorized remote attackers to exploit this vulner

Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowi

Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to

A vulnerability was found in SourceCodester Online Bank Management System and Online Bank Management System - 1.0. It ha

A vulnerability was found in SourceCodester Food Ordering Management System 1.0 and classified as problematic. Affected

A vulnerability classified as critical was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This vulnerability affects

A vulnerability classified as critical has been found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This affects the func

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. It has been rated as critical. Affected by this i

A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been declared

A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been classifie

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 and classified as critical. This issue affects the

Loway - CWE-204: Observable Response Discrepancy

Loway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 and classified as critical. This vulnerabilit

A vulnerability, which was classified as critical, was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/

A vulnerability was found in Gouniverse GoLang CMS 1.4.0. It has been declared as problematic. This vulnerability affect

A vulnerability was found in erjemin roll_cms up to 1484fe2c4e0805946a7bcf46218509fcb34883a9. It has been classified as

A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this i

The Opti Marketing WordPress plugin through 2.0.9 does not properly sanitise and escape a parameter before using it in a

The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its settings, which could

The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL

The WP MultiTasking WordPress plugin through 0.1.12 does not validate and escape some of its shortcode attributes befor

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could all

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating welcome popups, which could

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which

A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. Affected by t

A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901. Affected is the function rewa

A vulnerability, which was classified as critical, has been found in itsourcecode Payroll Management System 1.0. This is