2024

The Email Subscription Popup WordPress plugin before 1.2.20 does not sanitise and escape a parameter before outputting i

The WP VR WordPress plugin before 8.3.15 does not authorisation and CSRF in a function hooked to admin_init, allowing un

The WP Crowdfunding WordPress plugin before 2.1.9 does not sanitise and escape a parameter before outputting it back in

The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, whi

The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, whi

The WP Custom Cursors | WordPress Cursor Plugin WordPress plugin through 3.2 does not sanitise and escape some of its se

Cross-Site Request Forgery (CSRF) vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a throu

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Constant Contact Constant Contact Forms.This

The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net

io_uring UAF, Unix SCM garbage collection

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the h

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-a

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed,

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laybuy Laybuy Paym

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mapster Technology

Puma is a web server for Ruby/Rack applications built for parallelism. Prior to version 6.4.2, puma exhibited incorrect

pyLoad is the free and open-source Download Manager written in pure Python. A log injection vulnerability was identified

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. A reverse proxy server bui

Lack of "current" GET parameter validation during the action of changing a language leads to an open redirect vulnerabil

A vulnerability was found in Inis up to 2.0.1. It has been rated as critical. This issue affects some unknown processing

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GP

A vulnerability was found in Guangzhou Yingke Electronic Technology Ncast up to 2017 and classified as problematic. Affe

User-defined script code could be stored for a upsell related shop URL. This code was not correctly sanitized when addin

Users were able to define disclaimer texts for an upsell shop dialog that would contain script code that was not sanitiz

The "upsell" widget at the portal page could be abused to inject arbitrary script code. Attackers that manage to lure us

A vulnerability has been found in Youke365 up to 1.5.3 and classified as critical. Affected by this vulnerability is an

A vulnerability, which was classified as critical, was found in Youke365 up to 1.5.3. Affected is an unknown function of

A vulnerability, which was classified as critical, has been found in fhs-opensource iparking 1.5.22.RELEASE. This issue

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects t

A vulnerability was found in Byzoro Smart S150 Management Platform up to 20240101. It has been rated as critical. Affect

A vulnerability classified as critical was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected by this vulnerabil

IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls.

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the functi

IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, whi

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects

A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue af

A vulnerability classified as critical was found in Kashipara Food Management System 1.0. This vulnerability affects unk

A vulnerability classified as critical has been found in Kashipara Food Management System 1.0. This affects an unknown p

A vulnerability was found in Kashipara Food Management System 1.0. It has been rated as critical. Affected by this issue

A vulnerability, which was classified as critical, has been found in Totolink N350RT 9.3.5u.6139_B20201216. Affected by

A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6139_B20201216. Affected by this vulnerabilit

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affec

A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the f

A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this iss

A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by thi

A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. Affected is

A vulnerability, which was classified as critical, has been found in Kashipara Food Management System up to 1.0. This is

A vulnerability classified as critical was found in Kashipara Food Management System up to 1.0. This vulnerability affec

A vulnerability classified as critical has been found in Kashipara Food Management System up to 1.0. This affects an unk

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been rated as critical. Affected by this