2024

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileg

tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to man

Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A bui

tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate ar

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to a blind SQL Injection executed using the search bar

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET h

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested fi

Soft Circle French-Bread Melty Blood: Actress Again: Current Code through 1.07 Rev. 1.4.0 allows a remote attacker to ex

OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture.

Script afGdStream.php in AdmirorFrames Joomla! extension doesn’t specify a content type and as a result default (text/ht

Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to a

Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised atta

The Theron Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the them

The Scylla lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the them

The Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline,

The Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native ga

HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot

The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress

The Infinite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘project_url’ parameter in all ver

The Silesia theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ attribute within the theme's

A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-m

Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before

Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app ca

HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A maliciou

The SEO SIMPLE PACK plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2

The Pagerank tools WordPress plugin through 1.1.5 does not sanitise and escape a parameter before outputting it back in

The Simple AL Slider WordPress plugin through 1.2.10 does not sanitise and escape a parameter before outputting it back

The Animated AL List WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back i

The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the

The Simple Photoswipe WordPress plugin through 0.1 does not have authorisation check when updating its settings, which c

A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote aut

A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is

A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjans

HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multipl

A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in the

A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is

It was identified that under certain specific preconditions, an API key that was originally created with a specific priv

The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The Easy Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi

The Easy Image Collage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check

Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnera

An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096

PTC Creo Elements/Direct License Server exposes a web interface which can be used by unauthenticated remote attackers to

In the Linux kernel before 4.8, usb_parse_endpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize fie

The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data

Directory Traversal vulnerability in Kalkitech ASE ASE61850 IEDSmart upto and including version 2.3.5 allows attackers t

In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields

CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an