2024

The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting

A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnerability is

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File

A vulnerability was found in Spina CMS up to 2.18.0. It has been classified as problematic. Affected is an unknown funct

The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute withi

libcurl's URL API function [curl_url_get()](https://curl.se/libcurl/c/curl_url_get.html) offers punycode conversions, to

libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid fi

An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK al

An issue in the Certificate Authenticated Session Establishment (CASE) protocol for establishing secure sessions between

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Pinot. This issue affects Apache Pin

XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated mali

The All-in-One Video Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video sh

The Optimize Images ALT Text (alt tag) & names for SEO using AI plugin for WordPress is vulnerable to Full Path Disclosu

The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Full Path Disclosure in all version

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated mal

The Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps

The WP ULike WordPress plugin before 4.7.1 does not sanitise and escape some of its settings, which could allow high pr

In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actuall

The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to unauthorized modification of datadue to a mi

The LiteSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includin

The WooCommerce - PDF Vouchers plugin for WordPress is vulnerable to authentication bypass in versions up to, and includ

The Social Auto Poster plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation

The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing

The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability c

The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in

The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wp_name’ parameter in

The Social Auto Poster plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including

The Social Auto Poster plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to

Sentry is an error tracking and performance monitoring platform. Starting in version 10.0.0 and prior to version 24.7.1,

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate pri

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a ne

Okta Browser Plugin versions 6.5.0 through 6.31.0 (Chrome/Edge/Firefox/Safari) are vulnerable to cross-site scripting. T

The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data se

Ampache, a web based audio/video streaming application and file manager, has a stored cross-site scripting (XSS) vulnera

AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use i

An attacker could exploit the vulnerability by injecting garbage data or specially crafted data. Depending on the data i

Canarytokens help track activity and actions on a network. Prior to `sha-8ea5315`, Canarytokens.org was vulnerable to a

Exposure of temporary credentials in logs in Apache Arrow Rust Object Store (`object_store` crate), version 0.10.1 and e

An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate th

Canarytokens help track activity and actions on a network. A Cross-Site Scripting vulnerability was identified in the "

In lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function (used during string interning) allo

A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker

Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result

TF2 Item Format helps users format TF2 items to the community standards. Versions of `tf2-item-format` since at least `4

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the cmd parameter

go-chart v2.1.1 was discovered to contain an infinite loop via the drawCanvas() function.

If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from

Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYP

A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the atta