2024

in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through o

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause crash through integer overflow.

In wlan, there is a possible denial of service due to incorrect error handling. This could lead to remote denial of serv

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis

In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis

Linen before cd37c3e does not verify that the domain is linen.dev or www.linen.dev when resetting a password. This occur

WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Hero

WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Carou

A vulnerability classified as problematic was found in Grocy up to 4.2.0. This vulnerability affects unknown code of the

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in t

HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulner

A vulnerability was found in code-projects Hospital Management System 1.0. It has been rated as critical. Affected by th

A vulnerability was found in HM Courts & Tribunals Service Probate Back Office up to c1afe0cdb2b2766d9e24872c4e827f8b82a

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. This a

In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket.

The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including,

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in

The WP Events Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all ve

NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect

NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by pass

NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malfo

The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1

The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 d

The WPZOOM Portfolio Lite – Filterable Portfolio Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scriptin

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A local

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink: Initialise extack before use

The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ paramet

The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ paramet

The Attire theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.6 via des

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functi

Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture

Cairo-Contracts are OpenZeppelin Contracts written in Cairo for Starknet, a decentralized ZK Rollup. This vulnerability

In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls

Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and s

Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionali

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management Syste

A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0. Affected b

A flaw was found in Kroxylicious. When establishing the connection with the upstream Kafka server using a TLS secured co

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting (XSS) in /h.php/page?ref=addtabs via the "Title," "Images," and "C

Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php.

ShopXO 6.2 is vulnerable to Cross Site Scripting (XSS) in the backend that allows attackers to execute code by changing

A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. Affec

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.Thi

discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topi