2024

An issue has been discovered in GitLab EE affecting all versions from 16.4 prior to 16.6.7, 16.7 prior to 16.7.5, and 16

An issue has been discovered in GitLab EE affecting all versions starting from 11.3 before 16.7.6, all versions starting

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a se

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a se

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a se

An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive informatio

Graylog is a free and open log management platform. Starting in version 4.3.0 and prior to versions 5.1.11 and 5.2.4, re

Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Prior to version 1.3.3, an attacker can cr

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Forum One WP-CFM wp-cfm.This issue affects WP-CFM: from n/a through 1

Sensitive data can be extracted from HID iCLASS SE reader configuration cards. This could include credential and device

IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.6 products could allow a remote at

IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong p

IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 temporarily stores sensitive information in files that c

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been disc

The Document and Media widget In Liferay Portal 7.2.0 through 7.3.6, and older unsupported versions, and Liferay DXP 7.3

Frappe is a full-stack web application framework that uses Python and MariaDB on the server side and a tightly integrate

SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS) vulenrability via the comp

Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting (XSS) vulnerability vi

Improper Authentication vulnerability in Apache Ozone. The vulnerability allows an attacker to download metadata intern

The Podlove Podcast Publisher plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c

The Podlove Podcast Publisher plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabil

The Quiz Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on th

The Quiz Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) plugin for WordPress is vulnerabl

Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0

The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored

The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Script

The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Profile Display Name and Social Se

An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions

An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DL

Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to

Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because

A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unk

Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retri

A vulnerability has been found in Juanpao JPShop up to 1.5.02 and classified as critical. Affected by this vulnerability

A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter sca

A stored XSS vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus a

A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows

Certain configuration available in the communication channel for encoders could expose sensitive data when reader config

A vulnerability, which was classified as critical, was found in Juanpao JPShop up to 1.5.02. Affected is the function ac

A vulnerability, which was classified as critical, has been found in Juanpao JPShop up to 1.5.02. This issue affects the

PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condi

A vulnerability classified as critical was found in Juanpao JPShop up to 1.5.02. This vulnerability affects the function

A vulnerability classified as critical has been found in Juanpao JPShop up to 1.5.02. This affects the function actionIn

An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScr

An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript

A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could a

An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-si

An attacker with access to the network where the affected devices are located could maliciously actions to ob