2024

The 10Web AI Assistant – AI content writing assistant plugin for WordPress is vulnerable to unauthorized modification of

The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Insecure

The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Stored Cr

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c

The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scr

This plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to,

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Script

The GeneratePress Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom meta

The Advanced Custom Fields (ACF) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom text fie

The The Events Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and

The Meta Box – WordPress Custom Fields Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via c

The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the r

The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extra

An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to co

Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Unsafe echo of fi

phpMyFAQ is an Open Source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The 'sharing FAQ'

A security vulnerability has been identified in the cryptlib cryptographic library when cryptlib is compiled with the su

StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.13 are susceptible to a Denial of Service (D

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. phpMyFAQ's user r

Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker

A reflected cross-site scripting (XSS) vulnerability exists in the SVG version of System Diagnostics Manager of B&R Auto

When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the pag

Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker

1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the p

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker t

A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function. This can result in a null po

A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can

A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can resu

A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can

A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function.

A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can r

A race condition was found in the Linux kernel's sound/hda device driver in snd_hdac_regmap_sync() function. This can r

A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Kagan Scroll

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan's Art Add Cust

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gordon Böhme, Anto

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Five Star Plugins

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Dempfle Ad

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service w

In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of

In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

Vintage, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API create_overlay.cgi did not have a suffic

Brandon Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi did not have

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Dulaney Dan's