2024

An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administrat

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions

The Counter Up – Animated Number Counter & Milestone Showcase plugin for WordPress is vulnerable to Stored Cross-Site Sc

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized form su

The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cro

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Path

The ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi

lakeFS is an open-source tool that transforms object storage into a Git-like repository. Existing lakeFS users who have

A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.

An issue has been discovered in GitLab EE affecting all versions starting from 17.3 before 17.3.7, all versions starting

A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 12.6 prior to 17.4.5

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.4.5, starting from 17.5 pr

E.D.D.I (Enhanced Dialog Driven Interface) is a middleware to connect and manage LLM API bots. A path traversal vulnerab

A cross-site scripting (XSS) vulnerability in the Article module of SPIP v4.3.3 allows authenticated attackers to execut

An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute

sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient ver

A denial of service (DoS) condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 17.4.5, 17.

An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 b

An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 17.4.5, 17.5 before 17.5.3, and 17

Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read a

The Sugar Calendar – Simple Event Management plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to

A stored cross-site scripting (XSS) vulnerability was identified in PHPGURUKUL Vehicle Parking Management System v1.13 i

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows

The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal

A vulnerability exists in NSD570 that allows any authenticated user to access all device logs disclosing login informati

A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts. If exploited, thi

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Sc

Under certain circumstances, navigating to a webpage would result in the address missing from the location URL bar, maki

Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to

Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This

A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Ut

On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authenticatio

The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could hav

The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature ver

A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resultin

Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS thr

An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possib

Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI advertising report could lead to ou

Improper Validation of Array Index vulnerability in Apache NimBLE. Lack of input validation for HCI events from control

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. Specially crafte

VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to cl

VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to em

In Nunjucks versions prior to version 3.2.4, it was possible to bypass the restrictions which are provided by the autoe

The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in

A CWE-798 "Use of Hard-coded Credentials" was discovered affecting the following devices manufactured by Advantech: EKI-

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized access

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's JKit - Countdow

The Parsi Date plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg with

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wcj_produ

The Spotify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's