2024

Cross Site Scripting vulnerability in TWCMS v.2.6 allows a local attacker to execute arbitrary code via a crafted script

Cross Site Scripting vulnerability in ED01-CMS v.1.0 allows an attacker to obtain sensitive information via the categori

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plai

Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payl

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations.

A flaw was discovered in the RESTEasy Reactive implementation in Quarkus. Due to security checks for some JAX-RS endpoin

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as

A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented cac

A flaw was found in Keycloak that occurs from an error in the re-authentication mechanism within org.keycloak.authentica

A flaw was found in the SAML client registration in Keycloak that could allow an administrator to register malicious Jav

A flaw was found in the Keycloak package. This issue occurs due to a permissive regular expression hardcoded for filteri

A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the

A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the

Server-Side Request Forgery (SSRF) vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a throu

An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DIC

A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functio

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 before 16.9.6, all versions start

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vul

A flaw was found in Keycloak, where it does not correctly validate its client step-up authentication in org.keycloak.aut

Unicode transformation vulnerability in Hyperion affecting version 2.0.15. This vulnerability could allow an attacker to

Cross-Site Scripting (XSS) vulnerability in Hyperion Web Server affecting version 2.0.15. This vulnerability could allow

The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpm_paypal_su

Improper Restriction of Excessive Authentication Attempts vulnerability in LoginPress LoginPress Pro allows Removing Imp

An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.6, all versions starting from 16.10 befo

The Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery plugin for WordPress is vulnerable to Stored Cross-Site

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativethemeshq B

Missing Authorization vulnerability in MonsterInsights Google Analytics by Monster Insights.This issue affects Google An

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress

The Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elem

The Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) plugin for

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized l

Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications tha

Brocade SANnav before v2.3.0a lacks protection mechanisms on port 2377/TCP and 7946/TCP, which could allow an unauthent

The AGCA WordPress plugin before 7.2.2 does not sanitise and escape some of its settings, which could allow high privil

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insens

A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Soft

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been ava

Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), th

A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS So

Missing Authorization vulnerability in TrackShip TrackShip for WooCommerce.This issue affects TrackShip for WooCommerce:

Missing Authorization vulnerability in LoginPress LoginPress Pro.This issue affects LoginPress Pro: from n/a before 3.0.

Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCo

Missing Authorization vulnerability in Ovic Team Ovic Addon Toolkit.This issue affects Ovic Addon Toolkit: from n/a thro

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Foliovision FV Flowplayer Video Player.This issue a

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS vulnerability in Crocoblock JetFormBuilder

Improper Restriction of Rendered UI Layers or Frames vulnerability in Automattic Jetpack allows Clickjacking.This issue

Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly