2024

In the Linux kernel, the following vulnerability has been resolved: net: hns3: put off calling register_netdev() until

Anope before 2.0.15 does not prevent resetting the password of a suspended account.

This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.

Exposed IOCTL with insufficient access control issue exists in cg6kwin2k.sys prior to 2.1.7.0. By sending a specific IOC

Cross-site request forgery (CSRF) vulnerability in easy-popup-show all versions allows a remote unauthenticated attacker

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated at

The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access cus

The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attac

The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attac

Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.

Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.

Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Vi

Missing Authorization vulnerability in Sparkle WP Educenter.This issue affects Educenter: from n/a through 1.5.5.

CarrierWave is a solution for file uploads for Rails, Sinatra and other Ruby web frameworks. The vulnerability CVE-2023-

** UNSUPPORTED WHEN ASSIGNED ** ** DISPUTED ** A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and cla

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetSambaCo

A vulnerability was found in Tenda AC10U 15.03.06.48/15.03.06.49. It has been rated as critical. This issue affects the

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been classified as critical. This affects the

In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly

The XAO::Web module before 1.84 for Perl mishandles < and > characters in JSON output during use of json-embed in Web::A

The Mojolicious module before 7.66 for Perl may leak cookies in certain situations related to multiple similar cookies f

A vulnerability classified as critical was found in SourceCodester Simple File Manager 1.0. This vulnerability affects u

Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor

Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.

The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable t

The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p

The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gute

The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gute

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the legacy Image wi

The Move Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's infobox

The Custom WooCommerce Checkout Fields Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

A vulnerability, which was classified as critical, was found in lakernote EasyAdmin up to 20240315. Affected is the func

A vulnerability, which was classified as critical, has been found in lakernote EasyAdmin up to 20240315. This issue affe

A vulnerability classified as problematic was found in lakernote EasyAdmin up to 20240315. This vulnerability affects un

A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315. This affects an unknown par

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function Prin

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET

A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. This affects an unknown part of the file

Bref is an open-source project that helps users go serverless on Amazon Web Services with PHP. When Bref prior to versio

Translate is a package that allows users to convert text to different languages on Node.js and the browser. Prior to ver

A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. Affected by this issue is some unkn

A vulnerability classified as problematic was found in DedeCMS 5.7. Affected by this vulnerability is an unknown functio

IBM Security Verify Directory 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb

IBM Security Verify Directory 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to

IBM Security Verify Directory 10.0.0 could disclose sensitive server information that could be used in further attacks a

Logpoint before 7.1.0 allows Self-XSS on the LDAP authentication page via the username to the LDAP login form.

The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTM