2024

An out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently tra

On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by

In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the `common_gui.p

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the `common_gui.p

DocsGPT is a GPT-powered chat for documentation. DocsGPT is vulnerable to unauthenticated limited file write in routes.p

Open WebUI is a user-friendly WebUI for LLMs. Open-webui is vulnerable to authenticated blind server-side request forger

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' sh

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized email sending due to a missing c

Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p26 and <2.3.0b5 allows local attacker to

The archive-tainacan-collection theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of ad

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

In huge memory get unmapped area check, code can never be reached because of a logical contradiction.

An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.

A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access

In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computa

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Exclusive Addons E

An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information and execute arbitrary co

Cross Site Scripting (XSS) vulnerability in Typora v.1.6.7 and before, allows a local attacker to obtain sensitive infor

Cross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbit

Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb

An issue in JNT Telecom JNT Liftcom UMS V1.J Core Version JM-V15 allows a remote attacker to execute arbitrary code via

A session fixation vulnerability exists in the zenml-io/zenml application, where JWT tokens used for user authentication

In lunary-ai/lunary version 1.0.0, an authorization flaw exists that allows unauthorized radar creation. The vulnerabili

An SSRF (Server-Side Request Forgery) vulnerability exists in the gradio-app/gradio repository, allowing attackers to sc

Claris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting vulnerability due to a

Stored Cross-Site Scripting (XSS) vulnerability in Codoforum v4.9, allows attackers to execute arbitrary code and obtain

A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web

A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web

A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web

Cross Site Scripting (XSS) in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts

HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfus

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to imper

A vulnerability, which was classified as critical, has been found in Vesystem Cloud Desktop up to 20240408. This issue a

ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability

ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The API server does not enforce project source

In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521

A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of service via the LISTEN p

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom securi

SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denia

A vulnerability classified as critical was found in Vesystem Cloud Desktop up to 20240408. This vulnerability affects un

An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to cause a denial of service vi

Discourse-reactions is a plugin that allows user to add their reactions to the post. When whispers are enabled on a site

A buffer overflow vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Win

A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 ope

HCL DevOps Deploy / Launch is generating an obsolete HTTP header.

iTop is an IT service management platform. When creating or updating an object, extkey values aren't checked to be in t

iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.1