2024

The simple sort&search WordPress plugin through 0.0.3 does not make sure that the indexurl parameter of the shortcodes "

The Advanced AJAX Product Filters WordPress plugin does not sanitise the 'term_id' POST parameter before outputting it i

The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as problematic. This affects an unknown part

An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This v

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This fla

A vulnerability classified as problematic has been found in Totolink T8 4.1.5cu.833_20220905. This affects the function

A Cross-Site Request Forgery (CSRF) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated use

A Cross-site scripting (XSS) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could

Vulnerability of permission verification for APIs in the DownloadProviderMain module. Impact: Successful exploitation of

Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation of this vulnerability ma

A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the

Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows (Hitachi Tuning Manager server componen

Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (

Missing Password Field Masking vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent component

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection.

An issue in Knovos Discovery v.22.67.0 allows a remote attacker to obtain sensitive information via the /DiscoveryReview

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/article.

An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client s

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of t

Cross-Site Scripting in FireEye Malware Analysis (AX) affecting version 9.0.3.936530. This vulnerability allows an attac

Open Redirect vulnerability in FireEye HXTool affecting version 4.6, the exploitation of which could allow an attacker t

Cross-Site Scripting in FireEye HXTool affecting version 4.6. This vulnerability allows an attacker to store a specially

Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacke

fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of `@fastify/s

Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This v

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability all

XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify

The Keap Official Opt-in Forms WordPress plugin through 1.0.11 does not sanitise and escape some of its settings, which

The easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg WordPress p

The WP Crowdfunding WordPress plugin before 2.1.10 does not sanitise and escape some of its settings, which could allow

The WP Custom Widget area WordPress plugin through 1.2.5 does not properly apply capability and nonce checks on any of i

The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generat

The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like

The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which co

PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code execution via

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signed partitio

Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerabil

Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerabil

A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guar

An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the con

A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attac

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes

Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentica

Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the af

A vulnerability was found in FreeFloat FTP Server 1.0 and classified as problematic. Affected by this issue is some unkn

A vulnerability has been found in Ability FTP Server 2.34 and classified as problematic. Affected by this vulnerability

A vulnerability, which was classified as problematic, has been found in EasyFTP 1.7.0. This issue affects some unknown p

A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3. This vulnerabilit

A vulnerability classified as critical has been found in CodeAstro Real Estate Management System up to 1.0. This affects