2024

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix null pointer deref when receiving skb

The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This

The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This

The LadiApp plugn for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

The Slideshow, Image Slider by 2J plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘post’ pa

The Admission AppManager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'q' parameter in v

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che

The Short URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.8.

The LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, a

The Skitter Slideshow plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and inclu

The News Element Elementor Blog Magazine WordPress plugin before 1.0.6 is vulnerable to Local File Inclusion via the tem

The InPost for WooCommerce plugin and InPost PL plugin for WordPress are vulnerable to unauthorized access and deletion

A vulnerability has been found in Scooter Software Beyond Compare up to 3.3.5.15075 and classified as critical. Affected

CraftOS-PC 2 is a rewrite of the desktop port of CraftOS from the popular Minecraft mod ComputerCraft using C++ and a mo

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack.

An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier. Due to i

A reflected cross-site scripting (XSS) vulnerability exists in user/login.php at line 24 in ZZCMS 2023 and earlier. The

A stored cross-site scripting (XSS) vulnerability exists in ZZCMS2023 in the ask/show.php file at line 21. An attacker c

A reflected cross-site scripting (XSS) vulnerability in the component dl_liuyan_save.php of ZZCMS v2023 allows attackers

IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could al

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity

An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change f

IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authenticat

A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `netwo

A Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enable

H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as roo

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attack

H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attacker

A stored cross-site scripting (XSS) vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to exe

VTiger CRM <= 8.1.0 does not correctly check user privileges. A low-privileged user can interact directly with the "Migr

VTiger CRM <= 8.1.0 does not properly sanitize user input before using it in a SQL statement, leading to a SQL Injection

A Command Injection vulnerability exists in formWriteFacMac of the httpd binary in Tenda AC9 v15.03.06.42. As a result,

When performing an online tag generation to devices which communicate using the ControlLogix protocol, a machine-in-the

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a

An insecure driver vulnerability was reported in Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display

In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin

In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page

In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin

In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page

reNgine is an automated reconnaissance framework for web applications. Versions 2.1.2 and prior are susceptible to Store

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In versions on the 1.15.x bra

An insecure permissions vulnerability was reported in Lenovo Display Control Center (LDCC) and Lenovo Accessories and Di

The JetElements plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.6.20