2024

A vulnerability was found in SourceCodester Music Gallery Site 1.0 and classified as critical. Affected by this issue is

A vulnerability has been found in Campcodes Supplier Management System 1.0 and classified as critical. Affected by this

A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corne

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module.

svelte performance oriented web framework. A potential mXSS vulnerability exists in Svelte for versions up to but not in

A cross-site scripting (XSS) vulnerability in the component admin_datarelate.php of SeaCMS v12.9 allows attackers to exe

A vulnerability, which was classified as critical, was found in SourceCodester Sentiment Based Movie Rating System 1.0.

A vulnerability, which was classified as critical, has been found in SourceCodester Petshop Management System 1.0. This

Vulnerability in admin_ip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are writt

A vulnerability classified as critical was found in SourceCodester Petshop Management System 1.0. This vulnerability aff

A vulnerability classified as critical has been found in SourceCodester Electric Billing Management System 1.0. This aff

A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affec

A vulnerability was found in HFO4 shudong-share 2.4.7. It has been declared as critical. Affected by this vulnerability

A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VC

A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerabilit

A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function

A vulnerability was found in master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f. It has been rated as p

A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability e

A vulnerability was found in master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f. It has been declared a

A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been classified as critical. This affects an unknown

In the Linux kernel, the following vulnerability has been resolved: sched: Fix yet more sched_fork() races Where commi

The WP Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters from

The Clean Login plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.14.5

The Media Library Folders plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in a

The Tourfic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.11.

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calcul

The Events Calendar Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in

Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function

Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to

The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), whic

The HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics plugin for WordPress is vulnerable to Stored Cross-Site

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in a

The Betheme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 27.5.6 via d

The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized administrative actions execution due to a missing

The Enfold - Responsive Multi-Purpose Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wr

The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mepr_screenname' and 'mepr

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ and 'eae_sli

6SHR system from Gether Technology does not properly validate uploaded file types, allowing remote attackers with regula

6SHR system from Gether Technology does not properly validate the specific page parameter, allowing remote attackers wit

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific pa

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific p

An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_grou

An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to c

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and

Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on