2024

A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical. Affected by this iss

In the Linux kernel, the following vulnerability has been resolved: efivarfs: force RO when remounting if SetVariable i

In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled point

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference at hi

In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix duplicated list deletion Th

In the Linux kernel, the following vulnerability has been resolved: block: add check that partition length needs to be

In the Linux kernel, the following vulnerability has been resolved: serial: imx: fix tx statemachine deadlock When usi

Server-Side Request Forgery (SSRF) vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels:

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Arne Franken All In One

The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc

The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc

The Colibri WP theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scri

The SocialDriver WordPress theme before version 2024 has a prototype pollution vulnerability that could allow an attacke

Denial of service condition in M-Files Server in versions before 24.2 (excluding 23.2 SR7 and 23.8 SR5) allows anonymous

The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data d

The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data d

The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all v

A vulnerability was found in Totolink X6000R AX3000 9.4.0cu.852_20230719. It has been rated as critical. This issue affe

### Summary On all Label Studio versions prior to 1.11.0, data imported via file upload feature is not properly sanitize

A reflected Cross-Site Scripting (XSS) vulnerability in FUEL CMS 1.5.2allows attackers to run arbitrary code via crafted

A vulnerability, which was classified as critical, was found in TemmokuMVC up to 2.3. Affected is the function get_img_u

A vulnerability classified as critical was found in van_der_Schaar LAB AutoPrognosis 0.1.21. This vulnerability affects

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in th

An issue in flvmeta v.1.2.2 allows a local attacker to cause a denial of service via the flvmeta/src/flv.c:375:21 functi

Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.5.9

WayOS IBR-7150 <17.06.23 is vulnerable to Cross Site Scripting (XSS).

Discourse Calendar adds the ability to create a dynamic calendar in the first post of a topic on the open-source discuss

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix re-attachment branch in bpf_tracing_prog_a

In the Linux kernel, the following vulnerability has been resolved: erofs: fix inconsistent per-file compression format

In the Linux kernel, the following vulnerability has been resolved: net: netdevsim: don't try to destroy PHC on VFs PH

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: mtd: Fix gluebi NULL pointer dereference caused by

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix kernel NULL pointer dereference in gfs2_r

In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid crash when parsed profile name is e

The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_sup

cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/template_admin.php.

Utilizing a 302 redirect, an attacker could have conducted a Universal Cross-Site Scripting (UXSS) on a victim website,

Upon scanning a JavaScript URI with the QR code scanner, an attacker could have executed unauthorized scripts on the cur

baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in t

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in th

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_pla

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_pla

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_tra

A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitr

A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitr

A cross-site scripting (XSS) vulnerability in the New/Edit Article module of Enhavo CMS v0.13.1 allows attackers to exec

Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Blockquote m

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answ

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer.This