2024

A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in the licensing featur

Missing Authentication for Critical Function vulnerability in the mobile monitoring feature of Mitsubishi Electric GENES

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi E

The One Click Order Re-Order plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ca

The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pos

The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Marq

The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widg

The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and i

Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS com

A cross-site request forgery vulnerability exists in Sola Testimonials versions prior to 3.0.0. If this vulnerability is

A cross-site request forgery vulnerability exists in WP Tweet Walls versions prior to 1.0.4. If this vulnerability is ex

In https://github.com/google/nftables  IP addresses were encoded in the wrong byte order, resulting in an nftables conf

The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might atte

ZITADEL is an open-source identity infrastructure tool. ZITADEL provides users the ability to list all user sessions of

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta4 o

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta4 o

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When proc

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch, version 3.3.0.beta3 on t

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta3 o

An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution v

An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal (via a crafted PostScript documen

An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a cra

Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrar

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with

Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont p

The vulnerability allows an attacker to access sensitive files on the server by confusing the agent with incorrect file

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta3 o

Fides is an open-source privacy engineering platform, and `SERVER_SIDE_FIDES_API_URL` is a server-side configuration env

Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \000 byte in the

Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in th

Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF

The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker

The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an at

A malicious BLE device can send a specific order of packet sequence to cause a DoS attack on the victim BLE device

In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK.

A cross-site scripting (XSS) vulnerability in SimpCMS v0.1 allows attackers to execute arbitrary web scripts or HTML via

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pa

Stored XSS in Checkmk before versions 2.3.0p8, 2.2.0p29, 2.1.0p45, and 2.0.0 (EOL) allows users to execute arbitrary scr

An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the

BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR, AV-02IPD, AV-02FDE, A

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affe

Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Center v.2.0.36.0 allows a local attacker to

An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.

A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown fun

A high privileged remote attacker can execute arbitrary system commands via GET requests due to improper neutralization

Uncontrolled Resource Consumption vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can u

Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacke

A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an un

Mattermost versions 9.8.0, 9.7.x <= 9.7.4, 9.6.x <= 9.6.2, 9.5.x <= 9.5.5 fail to prevent specifying a RemoteId when cre