2024

Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text

A vulnerability was found in code-projects Farmacia up to 1.0. It has been declared as critical. Affected by this vulner

A vulnerability, which was classified as critical, has been found in code-projects Responsive Hotel Site 1.0. Affected b

A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms 3.7. It has been rated as problematic. This i

The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fintelligence Fint

A low privileged remote attacker can insert a SQL injection in the web application due to improper handling of HTTP requ

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mails

Missing sanitation of inputs allowed arbitrary users to conduct a stored XSS attack that triggers for users that view a

The uyuni-server-attestation systemd service needs a database_password environment variable. This file has 640 permissio

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all versions up t

The Restaurant & Cafe Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up

The Primary Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and in

The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's

The Login with Vipps and MobilePay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'c

The LegalWeb Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'legalweb-popup' s

The `Kudos Donations – Easy donations and payments with Mollie` plugin for WordPress is vulnerable to Reflected Cross-Si

The Kudos Donations – Easy donations and payments with Mollie plugin for WordPress is vulnerable to Reflected Cross-Site

The FAQ Builder AYS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ays_faq_tab' parameter

The Ragic Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ragic' shortcode

The SEO Landing Page Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of ad

The HLS Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hls_player' shortcode

The EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps i

The Image Alt Text plugin for WordPress is vulnerable to unauthorized modification of data| due to a missing capability

The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo and Slider settings, which

The adBuddy+ (AdBlocker Detection) by NetfunkDesign WordPress plugin through 1.1.3 does not sanitise and escape some of

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) WordPress pl

The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo Settings when outputing the

Inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') issue exists in HAProxy. If this vulner

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pen

In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide

In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing bo

In ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to integer overflow. This co

In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check.

go-gh is a Go module for interacting with the `gh` utility and the GitHub API from the command line. A security vulnerab

The gh cli is GitHub’s official command line tool. A security vulnerability has been identified in the GitHub CLI that c

Autolab is a course management service that enables auto-graded programming assignments. A user can modify their first a

In ih264d_assign_pic_num of ih264d_utils.c there is a possible out of bound read due to missing bounds check. This could

In mv_err_cost of mcomp.c there is a possible out of bounds read due to missing bounds check. This could lead to denial

In SensorService::isDataInjectionEnabled of frameworks/native/services/sensorservice/SensorService.cpp, there is a possi

In impeg2d_bit_stream_flush() of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead

Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects

An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300R

Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow.

This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center a

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This af

OpenVidReview 1.0 is vulnerable to Cross Site Scripting (XSS) in review names.

A Reflected Cross Site Scripting (XSS) vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COV

There was discovered a use after free bug in browser.c in the es_browser_get_variant function

The Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) plugin for WordPress is vulnerable