2024

Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remto

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.

Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. P

Vulnerability whereby an attacker could send a malicious link to an authenticated operator, which could allow remote att

This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by t

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected b

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affec

The SuperFaktura WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, an

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wiloke WooCommerce Coupon Popup, SmartBar, S

The Brizy – Page Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including,

A privilege escalation vulnerability exists in mintplex-labs/anything-llm, allowing users with 'default' role to delete

Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protoco

Theoretically, it would be possible for an attacker to brute-force the password for an instance in single-user password

User can send a chat that contains an XSS opportunity that will then run when the chat is sent and on subsequent page lo

The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An atta

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix NULL pointer dereference in zone

In the Linux kernel, the following vulnerability has been resolved: crypto: rsa - add a check for allocation failure S

In the Linux kernel, the following vulnerability has been resolved: ice: Fix some null pointer dereference issues in ic

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: check the alloc_workqueue return value

In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in of_sys

In the Linux kernel, the following vulnerability has been resolved: power: supply: Fix null pointer dereference in smb2

A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users t

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users t

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify th

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in

IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or a

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix null-ptr-deref during tty device unre

Versions of the package sanitize-html before 2.12.1 are vulnerable to Information Exposure when used on the backend and

The Archivist – Custom Archive Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘s

Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwar

Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwar

High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before v

Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon L

Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONN

A vulnerability, which was classified as problematic, was found in CodeAstro House Rental Management System 1.0. This af

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, po

A vulnerability classified as critical was found in CodeAstro Simple Voting System 1.0. Affected by this vulnerability i

A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects

In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix netdev_priv() dereference before chec

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix NULL pointer derefere

c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such

Wallos 0.9 is vulnerable to Cross Site Scripting (XSS) in all text-based input fields without proper validation, excludi

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affect