2024

Cross-Site Request Forgery (CSRF) vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 HUSKY – Products Filter for WooCommerce (formerly WOOF).Th

Cryptographic key vulnerability encoded in the FriendlyWrt firmware affecting version 2022-11-16.51b3d35. This vulnerabi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Soc

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SoundCloud Inc., L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FormFacade allows

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hiroaki Miyashita

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joseph C Dolson My

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Livemesh Livemesh

An access-control flaw was found in the OpenStack Designate component where private configuration information including

Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attack

Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to limit th

Mattermost Jira plugin versions shipped with Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9

A vulnerability, which was classified as problematic, has been found in Surya2Developer Hostel Management Service 1.0. T

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widg

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripti

A vulnerability, which was classified as critical, was found in Surya2Developer Hostel Management System 1.0. Affected i

A vulnerability classified as critical was found in MHA Sistemas arMHAzena 9.6.0.0. This vulnerability affects unknown c

A vulnerability was found in BradWenqiang HR 2.0. It has been rated as critical. Affected by this issue is the function

Zemana AntiLogger v2.74.204.664 is vulnerable to a Denial of Service (DoS) vulnerability by triggering the 0x80002004 an

Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IO

A Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a crafted payload to the email1

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x8000

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the LinkWr

An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of

The oik plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes such as bw_contact

IBM Integration Bus for z/OS 10.1 through 10.1.0.3 is vulnerable to cross-site request forgery which could allow an atta

vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Le

vantage6-UI is the official user interface for the vantage6 server. In affected versions a number of security headers ar

vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Le

follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows

Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow a

Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to pot

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized

Uncontrolled resource consumption for some Intel(R) SPS firmware versions may allow a privileged user to potentially ena

Improper input validation in the Intel(R) CSME installer software before version 2328.5.5.0 may allow an authenticated u

Information exposure through microarchitectural state after transient execution from some register files for some Intel(

Incorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0 may allow an authentica

Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel

The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a pot

A path traversal vulnerability exists in GoAnywhere MFT prior to 7.4.2 which allows attackers to circumvent endpoint-sp

Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/we_cmd.php

Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/we_cmd.php.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Livemesh Elementor

A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organiza

A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password.

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code.

An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in SonicWall Email Securit

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions