2024

A vulnerability, which was classified as problematic, was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. This affects an

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Icegram Email Subs

Server-Side Request Forgery (SSRF) vulnerability in Blossom Themes BlossomThemes Email Newsletter.This issue affects Blo

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p7, <2.2.0p28, <2.1.0p45 and <

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multip

The Easy Table of Contents WordPress plugin before 2.0.66 does not sanitise and escape some of its settings, which could

The Simple Photoswipe WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Ca

The Spotify Play Button WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes befor

The Video Widget WordPress plugin through 1.2.3 does not sanitise and escape some of its settings, which could allow hig

The Bookster WordPress plugin through 1.1.0 allows adding sensitive parameters when validating appointments allowing at

The Frontend Checklist WordPress plugin through 2.3.2 does not sanitise and escape some of its settings, which could all

The Frontend Checklist WordPress plugin through 2.3.2 does not sanitise and escape some of its settings, which could all

The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, whi

A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in accounts with no passwor

A vulnerability has been found in FAST/TOOLS and CI Server. The affected product's WEB HMI server's function to process

The WebP & SVG Support WordPress plugin through 1.4.0 does not sanitise uploaded SVG files, which could allow users with

The W3C XML Signature Syntax and Processing (XMLDsig) specification, starting with 1.0, was originally published with a

Apache XML Security for C++ through 2.0.4 implements the XML Signature Syntax and Processing (XMLDsig) specification wit

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_lon

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an open redirect vulnerab

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an OS command injection v

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an Improper Control of a

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 on DDMC contain a relative path t

An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 6A3

A command injection vulnerability exists in the mudler/localai version 2.14.0. The vulnerability arises from the applica

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a disclosure of temporary

Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnerability. A

Dell PowerProtect Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.40, LTS 7.10.1.30 contain an weak cryptographic alg

Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1.20 contain an SQL Injection vulnerability. A loca

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Server-Side Request For

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Stored Cross-Site Scrip

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Vi

October is a self-hosted CMS platform based on the Laravel PHP Framework. This issue affects authenticated administrator

A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Brocade Fabric

The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi

pdoc provides API Documentation for Python Projects. Documentation generated with `pdoc --math` linked to JavaScript fil

DSpace is an open source software is a turnkey repository application used by more than 2,000 organizations and institut

A vulnerability in a password management API in Brocade Fabric OS versions before v9.2.1, v9.2.0b, v9.1.1d, and v8.2.3e

A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session pas

An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to

Insecure Access Control in Safe Exam Browser (SEB) = 3.5.0 on Windows. The vulnerability allows an attacker to share cli

An arbitrary file upload vulnerability in /fileupload/upload.cfm in Daemon PTY Limited FarCry Core framework before 7.2.

Stored Cross Site Scripting vulnerability in Emby Media Server Emby Media Server 4.8.3.0 allows a remote attacker to esc

HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbi

In WhatsUp Gold versions released before 2023.1.3,  an unauthenticated Arbitrary File Read issue exists in Wug.UI.Areas

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Path Traversal vulnerability exists Wug.UI.Areas.W

In WhatsUp Gold versions released before 2023.1.3, a path traversal vulnerability exists. A specially crafted unauthenti

In WhatsUp Gold versions released before 2023.1.3, Distributed Edition installations can be exploited by using a deseria

In WhatsUp Gold versions released before 2023.1.3, an authenticated SSRF vulnerability in Wug.UI.Areas.Wug.Controllers.S