2024

Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to intercept t

HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code and modify

Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to execute and

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the delete

SQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary code via the dataScope pa

A vulnerability, which was classified as problematic, has been found in Tenda AC15 15.03.05.18. Affected by this issue i

A vulnerability classified as problematic was found in Tenda AC15 15.03.05.18. Affected by this vulnerability is the fun

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been classified as critical. This affects the

There is Stored Cross-Site Scripting (XSS) in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute

Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute a

Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter.

Cross Site Scripting (XSS) vulnerability in Lychee 3.1.6, allows remote attackers to execute arbitrary code and obtain s

The ColorMag theme for WordPress is vulnerable to Stored Cross-Site Scripting via a user's Display Name in all versions

The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Newsletter widg

The LiquidPoll – Polls, Surveys, NPS and Feedback Reviews plugin for WordPress is vulnerable to Sensitive Information Ex

The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to St

A vulnerability has been found in Campcodes/PHPGurukul Online Marriage Registration System 1.0 and classified as critica

A vulnerability, which was classified as critical, was found in Campcodes Online Marriage Registration System 1.0. Affec

A vulnerability classified as critical was found in Campcodes Online Marriage Registration System 1.0. This vulnerabilit

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0. It has been rated as critica

There is an SQL injection vulnerability in Advantech WebAccess/SCADA software that allows an authenticated attacker to

node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the

Improper neutralization of input within the affected product could lead to cross-site scripting.

A privilege escalation issue existed in FileMaker Server, potentially exposing sensitive information to front-end websit

A vulnerability was detected in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is a

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0. It has been classified as cr

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0 and classified as critical. T

A vulnerability has been found in Campcodes Complete Online Beauty Parlor Management System 1.0 and classified as critic

The SolarEdge mySolarEdge application before 2.20.1 for Android has a certificate verification issue that allows a Machi

A Cross-Site Request Forgery (CSRF) vulnerability in gradio-app/gradio allows attackers to upload multiple large files t

A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" U

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Automati

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Tracking C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPCoder WP Coder a

The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a p

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels WPFunnel

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crisp allows Store

The private key for the IBM Storage Protect Plus Server 10.1.0 through 10.1.16 certificate can be disclosed, undermining

Missing Authorization vulnerability in Jean-David Daviet Download Media.This issue affects Download Media: from n/a thro

Uncontrolled Resource Consumption vulnerability in David Artiss Code Embed.This issue affects Code Embed: from n/a throu

Improper Authentication vulnerability in Melapress WP 2FA allows Authentication Bypass.This issue affects WP 2FA: from n

This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the u

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the pin_code_3

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Repute Infosystems

IBM Storage Protect Plus Server 10.1.0 through 10.1.16 could allow an authenticated user with read-only permissions to a

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays bef

In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running

A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in

Possible race condition vulnerability in Apache Doris. Some of code using `chmod()` method. This method run the risk of