2024

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an SVGZ file upl

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widget's custom_

Opswat Metadefender Core before 5.2.1 does not properly defend against potential HTML injection and XSS attacks.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark Kinchin Beds2

LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhap

Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it sho

An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is di

Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtom

glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute()

Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed beca

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there

Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId().

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS is

In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.

A vulnerability was found in Campcodes Online Examination System 1.0. It has been classified as critical. Affected is an

A vulnerability was found in Campcodes Online Examination System 1.0 and classified as critical. This issue affects some

A vulnerability has been found in Campcodes Online Examination System 1.0 and classified as critical. This vulnerability

A vulnerability, which was classified as critical, was found in Campcodes Online Examination System 1.0. This affects an

A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. Affected b

The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and

The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and

The Master Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table

An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before

A buffer overflow occurs in utilities/ymodem/ry_sy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or

An out-of-bounds access occurs in utilities/var_export/var_export.c in RT-Thread through 5.0.2.

A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A

REST service authentication anomaly with “valid username/no password” credential combination for batch job processing re

A vulnerability was found in Campcodes Online Examination System 1.0. It has been rated as critical. This issue affects

A vulnerability classified as critical was found in SourceCodester Todo List in Kanban Board 1.0. Affected by this vulne

A vulnerability classified as critical has been found in SourceCodester Online Chatting System 1.0. Affected is an unkno

An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the `/prox

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the

A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by

In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device.

In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limi

A vulnerability, which was classified as problematic, was found in Tianjin PubliCMS 4.0.202302.e. This affects an unknow

A vulnerability, which was classified as critical, has been found in Ruijie RG-EG350 up to 20240318. Affected by this is

Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PeepSo Community by PeepSo.This issue affect

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in mbbhatti Upload Resume.This issue affects Up

A vulnerability classified as critical has been found in Tenda AC7 15.03.06.44. Affected is the function formWriteFacMac

A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a denial of service.

Cross-Site Request Forgery (CSRF) vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: fro

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer when load rlc firm

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix variable deferencing before NU

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix late derefrence 'dsc' check in

It is possible for a user in a different organization from the owner of a snapshot to bypass authorization and delete a

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7091r: Allow users to configure device

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Refactor DMCUB enter/exit idle int