2024

A vulnerability classified as critical has been found in SourceCodester Record Management System 1.0. Affected is an unk

A vulnerability was found in SourceCodester Record Management System 1.0. It has been rated as critical. This issue affe

The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using

The Bug Library WordPress plugin before 2.1.2 does not sanitise and escape some of its settings, which could allow high

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, a

A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as critical. This vulnera

Versions of the package github.com/gitpod-io/gitpod/components/server/go/pkg/lib before main-gha.27122; versions of the

Versions of the package github.com/gotenberg/gotenberg/v8/pkg/gotenberg before 8.1.0; versions of the package github.com

A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as critical. This affec

Microsoft Edge (Chromium-based) Spoofing Vulnerability

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. In affected versions

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. TorchServe 's check

HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an a

Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all s

The netty incubator codec.bhttp is a java language binary http parser. In affected versions the `BinaryHttpParser` class

The Duplica – Duplicate Posts, Pages, Custom Posts or Users plugin for WordPress is vulnerable to unauthorized modificat

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and i

calculator-boilerplate v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the eval function

The PHPGurukul Online Shopping Portal Project version 2.0 contains a vulnerability that allows Cross-Site Request Forger

HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malic

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read contai

Failure to properly synchronize user's permissions in UAA in Cloud Foundry Foundation v40.17.0 https://github.com/cloud

Improper Restriction of XML External Entity Reference vulnerability in PruvaSoft Informatics Apinizer Management Console

HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the s

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software

Authentication Bypass Using an Alternate Path or Channel vulnerability in PruvaSoft Informatics Apinizer Management Cons

Authorization Bypass Through User-Controlled Key vulnerability in PruvaSoft Informatics Apinizer Management Console allo

Incorrect Permission Assignment for Critical Resource vulnerability in PruvaSoft Informatics Apinizer Management Console

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The `UserIdentity::is_verified()` method

sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK < 2.8.0 allows the environment variabl

gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. `gix-path` can be tricked into running another

JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand an

JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand an

The product does not require unique and complex passwords to be created during installation. Using Philips's default pa

1Panel is a web-based linux server management control panel. 1Panel contains an unspecified sql injection via User-Agent

1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of t

Dell Data Lakehouse, version(s) 1.0.0.0, contain(s) a Missing Encryption of Sensitive Data vulnerability in the DDAE (St

Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privile

IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE)

Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True

An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors.

On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution

Rapid7 InsightVM Console versions below 6.6.260 suffer from a protection mechanism failure whereby an attacker with netw

SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes t

A partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type b

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for W

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for W

The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension vali

Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Den