2024

A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as cri

A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management Sy

A vulnerability, which was classified as critical, has been found in SourceCodester Kortex Lite Advocate Office Manageme

A vulnerability classified as critical was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Th

A vulnerability classified as critical has been found in SourceCodester Kortex Lite Advocate Office Management System 1.

A vulnerability was found in code-projects Online Polling 1.0. It has been rated as critical. Affected by this issue is

A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been declared as critical. Affected by this

A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been classified as critical. Affected is an

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthori

A vulnerability was found in Edimax IC-6220DC and IC-5150W up to 3.06. It has been rated as critical. Affected by this i

A vulnerability was found in Tenda FH1206 1.2.0.8. It has been declared as critical. Affected by this vulnerability is t

A vulnerability was found in Tenda FH1206 1.2.0.8(8155). It has been classified as critical. Affected is the function fr

A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function from

A signal handler in sshd(8) may call a logging function that is not async-signal-safe. The signal handler is invoked wh

The Christmasify! plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5

A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models w

Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in Board instances. A rogue adminis

The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and includ

The Reveal Template plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.7

The PDF Builder for WPForms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and includ

The Obfuscate Email plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.8

The No Update Nag plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.1

The My Custom CSS PHP & ADS plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and includ

This vulnerability exists in Airveda Air Quality Monitor PM2.5 PM10 due to transmission of sensitive information in plai

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 2

The Linkify Text plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.9.1.

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill_audio

A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger me

A logic bug in the code which disables kernel tracing for setuid programs meant that tracing was not disabled when it sh

When mounting a remote filesystem using NFS, the kernel did not sanitize remotely provided filenames for the path separa

Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low pri

The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPr

The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPr

Authentication Bypass Using an Alternate Path or Channel vulnerability in GST Electronics inohom Nova Panel N7 allows Au

In ICMPv6 Neighbor Discovery (ND), the ID is always 0. When pf is configured to allow ND and block incoming Echo Reques

The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all ver

The Category Posts Widget WordPress plugin before 4.9.17, term-and-category-based-posts-widget WordPress plugin before 4

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could all

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputtin

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputtin

Enabled IP Forwarding feature in B&R Automation Runtime versions before 6.0.2 may allow remote attack-ers to compromise

Diffie-Hellman groups with insufficient strength are used in the SSL/TLS stack of B&R Automation Runtime versions before

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution (RCE) pr

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing co

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface a

Ecosystem Agent version 4 < 4.1.5.2597 and Ecosystem Agent version 5 < 5.1.4.2473 did not properly validate SSL/TLS cert

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for W

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for W

Concrete CMS versions 9.0.0 to 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in RSS Displayer when user input is s

DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software developer,