2024

In the Linux kernel, the following vulnerability has been resolved: nvme: fix a possible use-after-free in controller r

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix possible use-after-free in transport

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix possible use-after-free in transport

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection

Directory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute arbitrary code via the web

A potential security vulnerability has been identified in certain HP PC products using AMI BIOS, which might allow arbit

TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php. In `torrentpier/library/includes

Thruk is a multibackend monitoring webinterface for Naemon, Nagios, Icinga and Shinken using the Livestatus API. This au

A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack

A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-b

A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-b

The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Ove

AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to

The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an un

Sourcecodester Poultry Farm Management System v1.0 contains an Unauthenticated Remote Code Execution (RCE) vulnerability

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope para

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope para

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope para

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope para

Unrestricted Upload of File with Dangerous Type vulnerability in Realtyna Realtyna Organic IDX plugin allows Code Inject

Unrestricted Upload of File with Dangerous Type vulnerability in SpreadsheetConverter Import Spreadsheets from Microsoft

FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in anhvnit Woocommerc

Incorrect Privilege Assignment vulnerability in NooTheme Jobmonster noo-jobmonster allows Privilege Escalation.This issu

In the Linux kernel, the following vulnerability has been resolved: net: ena: Add validation for completion descriptors

In the Linux kernel, the following vulnerability has been resolved: tipc: force a dst refcount before doing decryption

In the Linux kernel, the following vulnerability has been resolved: gve: Clear napi->skb before dev_kfree_skb_any() gv

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: disable rx data ring on dma allocation fai

In the Linux kernel, the following vulnerability has been resolved: ionic: fix kernel panic in XDP_TX action In the XD

The default configuration of XSLTResourceStream.java is vulnerable to remote code execution via XSLT injection when proc

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypa

A vulnerability in the `_backup_run` function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any fi

An issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM

CWE-200: Information Exposure vulnerability exists that could cause disclosure of credentials when a specially crafted m

The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.6, starting from 17.0 p

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all

Whale browser before 3.26.244.21 allows an attacker to execute malicious JavaScript due to improper sanitization when pr

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any loc

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending

EVerest is an EV charging software stack. An integer overflow in the "v2g_incoming_v2gtp" function in the v2g_server.cpp

An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The Nonce used for on-the-f

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account

14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint function. This

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This i

ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earl

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platfo

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data.

Fujian Kelixun <=7.6.6.4391 is vulnerable to SQL Injection in send_event.php.

SQL injection vulnerability in view_payslip.php in Itsourcecode Payroll Management System Project In PHP With Source Cod