2024

Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34.

Zitadel is an open source identity management system. ZITADEL uses HTML for emails and renders certain information such

Zitadel is an open source identity management system. ZITADEL administrators can enable a setting called "Ignoring unkno

Haystack is an end-to-end LLM framework that allows you to build applications powered by LLMs, Transformer models, vecto

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By creating a c

Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. It is possible for an attacker to c

The Ibexa Admin UI Bundle contains all the necessary parts to run the Ibexa DXP Back Office interface. The file upload w

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with e

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When uploading

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When a user has

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation

A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations

A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical acces

DM5500 5.16.0.0, contains an information disclosure vulnerability. A local attacker with high privileges could potential

A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library packaged with the ThermoscanIP installer al

A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a loca

A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service. Such misconfiguration could be

A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative account allows an attacker w

A “CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')” allows malicious users

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm_all_packag

Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead

A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulner

A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affe

A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue af

The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the

The Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for Word

A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. This vuln

A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. This af

A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affe

A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as critical.

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker

Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated mali

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker

Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacke

The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c

A vulnerability, which was classified as critical, was found in SourceCodester Establishment Billing Management System 1

A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. Thi

libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an

Dell BSAFE Crypto-C Micro Edition, version 4.1.5, and Dell BSAFE Micro Edition Suite, versions 4.0 through 4.6.1 and ver

A vulnerability classified as problematic has been found in Bolt CMS 3.7.1. Affected is an unknown function of the file

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Bolt CMS 3.7.1. It has been rated as problematic. This issu

A verbose error handling issue in the proxy service implemented in the GravityZone Update Server allows an attacker to c

A vulnerability classified as critical has been found in SourceCodester Establishment Billing Management System 1.0. Thi

A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been rated as critical.

When the device is shared, the homepage module are before 2.19.0  in eWeLink Cloud Service allows Secondary user to take

The Lifetime free Drag & Drop Contact Form Builder for WordPress VForm plugin for WordPress is vulnerable to Stored Cros

it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and

The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to

The Slider by 10Web WordPress plugin before 1.2.57 does not sanitise and escape its Slider Title, which could allow hig

The SpiderContacts WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting it back in