2024

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mooberry Dreams Mooberry Book Manager.This i

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AltText.Ai Downloa

Missing Authorization vulnerability in Supsystic Digital Publications by Supsystic.This issue affects Digital Publicatio

Authorization Bypass Through User-Controlled Key vulnerability in The SEO Guys at SEOPress SEOPress.This issue affects S

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in RoboSoft Robo Gallery.This issue affects Rob

SQL injection vulnerability in /model/delete_record.php in campcodes Complete Web-Based School Management System 1.0 all

An issue was discovered in HSC Mailinspector 5.2.17-3. A Path Traversal vulnerability (resulting in file deletion) exist

A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote

An issue was discovered in Archer Platform 6 before 2024.03. There is an X-Forwarded-For Header Bypass vulnerability. An

Archer Platform 6 before 2024.03 contains a sensitive information disclosure vulnerability. An authenticated attacker co

An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An authenticated blind SQL injection vulnerabili

html-sanitizer is an allowlist-based HTML cleaner. If using `keep_typographic_whitespace=False` (which is the default),

Jinja is an extensible templating engine. The `xmlattr` filter in affected versions of Jinja accepts keys containing non

D-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php.

D-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php.

Memory corruption in HLOS while checking for the storage type.

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is

Information disclosure while parsing dts header atom in Video.

Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.

Memory corruption while copying the sound model data from user to kernel buffer during sound model register.

Memory corruption when the bandpass filter order received from AHAL is not within the expected range.

Memory corruption when multiple listeners are being registered with the same file descriptor.

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be e

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=up

An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after

The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom postmeta output

E-Mails exported as PDF were stored in a cache that did not consider specific session information for the related user a

Maliciously crafted E-Mail attachment names could be used to temporarily execute script code in the context of the users

Content-ID based embedding of resources in E-Mails could be abused to trigger client-side script code when using the "sh

E-Mail containing malicious display-name information could trigger client-side script execution when using specific mobi

The MF Gig Calendar WordPress plugin through 1.2.1 does not sanitise and escape some of its settings, which could allow

The Crelly Slider WordPress plugin through 1.4.5 does not sanitise and escape some of its settings, which could allow hi

The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could

In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation

In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation

In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local esc

In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to

In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of pr

A vulnerability classified as critical has been found in Shanghai Sunfull Automation BACnet Server HMI1002-ARM 2.0.4. Th

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. Affected by this issue is some

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been declared as critical. Affected by this vulnerabil

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been classified as critical. Affected is an unknown fu

A vulnerability was found in Ruijie RG-UAC up to 20240428 and classified as critical. This issue affects some unknown pr

Nebari through 2024.4.1 prints the temporary Keycloak root password.

FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.

A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. This vulnerability affects un

A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240428. This affects an unknown pa

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. Affected by this issu