2024

The Easy Table of Contents WordPress plugin before 2.0.68 does not sanitise and escape some parameters, which could allo

A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decod

The shortcodes-ultimate-pro WordPress plugin before 7.2.1 does not validate and escape some of its shortcode attributes

The WordPress File Upload WordPress plugin before 4.24.8 does not sanitise and escape a parameter before outputting it b

HaloITSM versions up to 2.146.1 are affected by a Password Reset Poisoning vulnerability. Poisoned password reset links

HaloITSM versions up to 2.146.1 are affected by a SAML XML Signature Wrapping (XSW) vulnerability. When having a SAML in

HaloITSM versions up to 2.146.1 are affected by a Template Injection vulnerability within the engine used to generate em

HaloITSM versions up to 2.146.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability. The injected JavaScri

The WPBakery Visual Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and inclu

The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by t

Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user

A vulnerability, which was classified as critical, was found in itsourcecode Bike Delivery System 1.0. Affected is an un

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been rated as critical. Affected by thi

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL in

Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea

Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.

Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve arbitrary file read.

Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been declared as critical. Affected by

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected i

Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).This issue

Expression Language Injection vulnerability in Hitachi Tuning Manager on Windows, Linux, Solaris allows Code Injection.T

A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects

A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. This vulnerabi

The Traffic Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in the 'U

The CRM Perks Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on

The Blox Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation i

The Horizontal scrolling announcements plugin for WordPress is vulnerable to SQL Injection via the plugin's 'hsas-shortc

A vulnerability, which was classified as critical, was found in itsourcecode Laravel Accounting System 1.0. This affects

oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attack

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attacker

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attacker

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attacker

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attacker

oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attac

oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attack

oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attac

oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execut

oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attacker

oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attacker

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.

Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. `nuxt/icon` pro

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain c

Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. Due to the insu

Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. The `navigateTo

Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. Nuxt Devtools i

JFrog Artifactory versions below 7.90.6, 7.84.20, 7.77.14, 7.71.23, 7.68.22, 7.63.22, 7.59.23, 7.55.18 are vulnerable to

Biscuit is an authorization token with decentralized verification, offline attenuation and strong security policy enforc