2024

The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.64 does not sanitise and escape

The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users

The Responsive Tabs WordPress plugin before 4.0.7 does not validate and escape some of its shortcode attributes before o

The NPS computy WordPress plugin through 2.7.5 does not sanitise and escape some of its settings, which could allow high

The Testimonial Slider WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allo

The Carousel Slider WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow h

The Top Bar WordPress plugin before 3.0.5 does not sanitise and escape some of its settings, which could allow high priv

The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking produ

The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow us

The Smart Forms WordPress plugin before 2.6.94 does not have CSRF checks in some places, which could allow attackers to

The Meta Box WordPress plugin before 5.9.4 does not prevent users with at least the contributor role from access arbitr

The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could

The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high

The WP User Profile Avatar WordPress plugin through 1.0.1 does not validate and escape some of its shortcode attributes

The parameter used in the login page of Netvision airPASS is not properly filtered for user input. An unauthenticated re

aEnrich Technology a+HRD's functionality for downloading files using youtube-dl.exe does not properly restrict user inpu

A vulnerability, which was classified as critical, has been found in PHPGurukul/itsourcecode News Portal 4.1. This issue

A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. This vulnerability affects unknown code

aEnrich Technology a+HRD's functionality for front-end retrieval of system configuration values lacks proper restriction

Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service vi

A vulnerability, which was classified as critical, has been found in cym1102 nginxWebUI up to 3.9.9. This issue affects

A vulnerability classified as critical was found in cym1102 nginxWebUI up to 3.9.9. This vulnerability affects unknown c

A vulnerability was found in cym1102 nginxWebUI up to 3.9.9. It has been rated as critical. Affected by this issue is th

A vulnerability was found in cym1102 nginxWebUI up to 3.9.9. It has been declared as problematic. Affected by this vulne

A vulnerability was found in TBK DVR-4104 and DVR-4216 up to 20240412 and classified as critical. This issue affects som

A vulnerability has been found in Tianwell Fire Intelligent Command Platform 1.1.1.1 and classified as critical. This vu

In the Linux kernel, the following vulnerability has been resolved: amdkfd: use calloc instead of kzalloc to avoid inte

A vulnerability, which was classified as critical, was found in Campcodes House Rental Management System 1.0. This affec

The WPZOOM Social Feed Widget & Block plugin for WordPress is vulnerable to unauthorized access due to a missing capabil

The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin set

The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.0.5 does not properly escape some of its shortc

The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting

OpenTelemetry dotnet is a dotnet telemetry framework. In affected versions of `OpenTelemetry.Instrumentation.Http` and `

stable-diffusion-webui is a web interface for Stable Diffusion, implemented using Gradio library. Stable-diffusion-webui

matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. matrix-appservice-irc before version 2.

A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by

A vulnerability was found in Campcodes House Rental Management System 1.0. It has been classified as critical. Affected

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4 and IBM

Dell Storage Resource Manager, 4.9.0.0 and below, contain(s) a Session Fixation Vulnerability in SRM Windows Host Agent.

A vulnerability was found in Campcodes House Rental Management System 1.0 and classified as critical. This issue affects

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allo

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon (l2ald) of

An Out-of-bounds Read vulnerability in the advanced forwarding management process aftman of Juniper Networks Junos OS on

A Missing Authentication for Critical Function vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks J

An Improper Restriction of Excessive Authentication Attempts vulnerability in Juniper Networks Junos OS Evolved allows a

An Incorrect Behavior Order vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on EX4300 S