2024

The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.6, starting from 17.0 p

The Feeds for YouTube (YouTube video, channel, and gallery plugin) plugin for WordPress is vulnerable to Stored Cross-Si

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 16.11.6, starting from 17.0 p

The Secure Copy Content Protection and Content Locking WordPress plugin before 4.0.9 does not sanitise and escape some o

The Slider by 10Web WordPress plugin before 1.2.56 does not sanitise and escape some of its Slide options, which could

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings,

The Bible Text WordPress plugin through 0.2 does not validate and escape some of its shortcode attributes before outputt

The Ultimate Blocks WordPress plugin before 3.1.9 does not validate and escape some of its block options before outputt

The VikRentCar Car Rental Management System WordPress plugin before 1.3.2 does not have CSRF checks in some places, whic

VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authent

The Branda – White Label WordPress, Custom Login Page Customizer plugin for WordPress is vulnerable to Full Path Disclos

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all

The Payflex Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap

A vulnerability has been found in witmy my-springsecurity-plus up to 2024-07-03 and classified as critical. Affected by

The Duplicator plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 1.5.9. T

Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the C

External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local

Improper output Neutralization for Logs (CWE-117) in the Command Centre API Diagnostics Endpoint could allow an attacker

External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface al

A vulnerability classified as critical was found in mhuertos phpLDAPadmin up to 665dbc2690ebeb5392d38f1fece0a654225a0b38

Whale browser before 3.26.244.21 allows an attacker to execute malicious JavaScript due to improper sanitization when pr

A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability af

The FULL – Cliente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the license plan parameter in a

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problema

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any loc

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending

An Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in J-Web shipped with Juni

A Missing Release of Resource after Effective Lifetime vulnerability the xinetd process, responsible for spawning SSH da

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Jun

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Ju

An Improper Check for Unusual or Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS

An Unchecked Return Value vulnerability in the Routing Protocol Daemon (rpd) on Juniper Networks Junos OS and Juniper Ne

An Uncontrolled Resource Consumption vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Network

A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow

An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Ju

A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability the Routin

A Heap-based Buffer Overflow vulnerability in the telemetry sensor process (sensord) of Juniper Networks Junos OS on MX2

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon (l2ald) on

An Improper Check or Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Ne

An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved al

An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allow

An Improper Input Validation vulnerability in the 802.1X Authentication (dot1x) Daemon of Juniper Networks Junos OS allo

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows

A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning