2024

The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' and 'slide_id' parameters

Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager a

Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager a

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Uti

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Uti

Improper Authentication vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Bypass.This i

The JetBlocks for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple placeholder p

The JetTabs for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and includin

The JetSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions u

Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Valida

The Download Plugins and Themes in ZIP from Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery i

The Grow by Tradedoubler WordPress plugin through 2.0.21 is vulnerable to Local File Inclusion via the component parame

The WordPress File Upload plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all

The Theme My Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Information Exposure in all versions up to, and i

The Custom Field For WP Job Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versio

The Cookie Notice & Compliance for GDPR / CCPA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as problematic. This issue

A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vul

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by th

calamares-nixos-extensions provides Calamares branding and modules for NixOS, a distribution of GNU/Linux. Users who ins

The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new fi

gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting (XSS) injection if `.po` dict

Ibexa RichText Field Type is a Field Type for supporting rich formatted text stored in a structured XML format. In versi

A vulnerability has been found in SourceCodester Online Graduate Tracer System 1.0 and classified as problematic. Affect

A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Aff

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Graduate Tracer System 1.0

A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System 1.0. This vulnerabi

In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the

In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to

In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be vis

In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection d

In shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible escape from SUW due to a

In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRea

In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable a

In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabl

In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app

In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. T

In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. Th

In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow. This could

In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT

A vulnerability classified as critical has been found in itsourcecode Billing System 1.0. This affects an unknown part o

AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privi

Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0

zkvyper is a Vyper compiler. Starting in version 1.3.12 and prior to version 1.5.3, since LLL IR has no Turing-incomplet

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.14.14 and

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In the 1.15 branch prior to 1

In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero.