2024

In the Linux kernel, the following vulnerability has been resolved: tcp: avoid too many retransmit packets If a TCP so

Mattermost Mobile Apps versions <=2.16.0 fail to validate that the push notifications received for a server actually cam

Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows a

Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject Jav

Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS cou

An incorrect privilege assignment vulnerability in the inline editing functionality of OTRS can lead to privilege escala

In Apache Linkis <=1.5.0, due to the lack of effective filtering of parameters, an attacker configuring malicious db2

In Apache Linkis <= 1.5.0, data source management module, when adding Mysql data source, exists remote code execution v

In Apache Linkis =1.4.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql

The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Ove

AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to

AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regul

The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect W

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputtin

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not have CSRF checks in some places, which could all

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputtin

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputtin

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not escape the $_SERVER['REQUEST_URI'] parameter bef

The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading

Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution

The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote att

The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers t

The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implement

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to traverse directories on the

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 displays version information in HTTP requests that could all

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability al

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive inform

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to server-side request forgery (SSRF). This ma

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to obtain sensitive informatio

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper v

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 uses weaker than expected cryptographic algorithms that coul

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to stored cross-site scripting. This vulnerabi

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as crit

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution vi

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulner

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affe

A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this i

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. This

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0.

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 stores user credentials in plain clear text which can be rea

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 temporarily stores data from different environments that cou

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix UAF in svc_tcp_listen_data_ready() Aft

A vulnerability was found in Nanjing Xingyuantu Technology SparkShop up to 1.1.6. It has been rated as critical. This is

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been declared as c

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affe

The WP Links Page plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch

The Laposta plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.12. This

The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not sanitise and escape some of its setti

The wp-eMember WordPress plugin before 10.6.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it