2024

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v

The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Code Inje

The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and includin

The Unlimited Addons for WPBakery Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to insuf

The File Manager Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8

The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due t

The EditorsKit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation on the '

Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An a

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages

A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that us

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/

gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_b

gpac v2.2.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the dasher_configure_pid function at /src

gpac v2.2.1 was discovered to contain a memory leak via the dst_props variable in the gf_filter_pid_merge_properties_int

Lotos WebServer v0.1.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the response_append_status_lin

media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_uac_stop_timer function a

media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_subscribe_remove function

freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry functi

freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function.

Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via th

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via th

The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broa

`python-multipart` is a streaming multipart parser for Python. When using form data, `python-multipart` uses a Regular E

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerab

A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is t

Out-of-bounds Write vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-

Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the err

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MJS Software PT Si

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgadbois Calculato

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MightyThemes Might

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Biteship Biteship:

In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalati

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote e

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of

An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.

libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in th

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with a

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD

A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticate

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitr

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V

A vulnerability, which was classified as critical, has been found in SourceCodester Testimonial Page Manager 1.0. This i