2024

An issue fixed in AIT-Deutschland Alpha Innotec Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later and Novel

Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200

Cross Site Scripting (XSS) vulnerability in Craft CMS Audit Plugin before version 3.0.2 allows attackers to execute arbi

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the width and heig

A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it poss

An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a d

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allow

A Cross-Site Request Forgery (CSRF) vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unautho

A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is

Cross Site Request Forgery (CSRF) vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote at

Softing TH SCOPE through 3.70 allows XSS.

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Security-sensitive parts of the Python H

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and c

A vulnerability, which was classified as critical, has been found in Rebuild up to 3.5.5. Affected by this issue is the

Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Serv

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenti

The 'Your Name' field in the Submit Score section of Sourcecodester Math Game with Leaderboard v1.0 is vulnerable to Cro

A stored cross-site scripting (XSS) vulnerability in /install.php?m=install&c=index&a=step3 of GreenCMS v2.3 allows atta

Product Name and Product Code in the 'Add Product' section of Sourcecodester Product Inventory with Export to Excel 1.0

Sourcecodester Online Food Menu 1.0 is vulnerable to Cross Site Scripting (XSS) via the 'Menu Name' and 'Description' fi

A vulnerability was found in Gabriels FTP Server 1.2. It has been rated as problematic. This issue affects some unknown

Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated use

A vulnerability was found in Solar FTP Server 2.1.1/2.1.2. It has been declared as problematic. This vulnerability affec

A vulnerability classified as problematic was found in SourceCodester Employee Management System 1.0. This vulnerability

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulner

A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposu

An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensi

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE bin

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new varia

spbu_se_site is the website of the Department of System Programming of St. Petersburg State University. Before 2024.01.2

Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnera

Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected b

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected

A vulnerability has been found in Shanxi Diankeyun Technology NODERP up to 6.0.2 and classified as critical. This vulner

The EventON WordPress plugin before 4.4.1 does not sanitise and escape a parameter before outputting it back in the page

The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthentica

The Easy SVG Allow WordPress plugin through 1.0 does not sanitize uploaded SVG files, which could allow users with a rol

The Site Notes WordPress plugin through 2.0.0 does not have CSRF checks in some of its functionalities, which could allo

The TJ Shortcodes WordPress plugin through 0.1.3 does not validate and escape some of its shortcode attributes before ou

The WP Plugin Lister WordPress plugin through 2.1.0 does not have CSRF check in some places, and is missing sanitisation

The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via the "wptbto" parameter. This makes it poss

The Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo WordPress plugin before 2.2.25 does not sanitise and esc

The Restrict Usernames Emails Characters WordPress plugin before 3.1.4 does not sanitise and escape some of its settings

The Wp-Adv-Quiz WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high

The Wp-Adv-Quiz WordPress plugin before 1.0.3 does not sanitise and escape some of its settings, which could allow high

The Page Builder: Pagelayer WordPress plugin before 1.8.0 doesn't prevent attackers with administrator privileges from i

LightCMS v2.0 is vulnerable to Cross Site Scripting (XSS) in the Content Management - Articles field.