2024

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak

In the Linux kernel, the following vulnerability has been resolved: Input: cyapa - add missing input core locking to su

The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to time-based SQL Injection via the ‘conditi

IBM i 7.3, 7.4, and 7.5 product IBM TCP/IP Connectivity Utilities for i contains a local privilege escalation vulnerabil

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Reflected Cross-Si

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Script

The WP SVG Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter in all vers

Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation

The User Profile Picture plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, a

The Branda – White Label WordPress, Custom Login Page Customizer plugin for WordPress is vulnerable to Stored Cross-Site

An issue was discovered in the events2 (aka Events 2) extension before 8.3.8 and 9.x before 9.0.6 for TYPO3. Missing acc

An issue was discovered in the friendlycaptcha_official (aka Integration of Friendly Captcha) extension before 0.1.4 for

The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin through 1.7 does not validate and esca

The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin through 1.7 does not sanitise and esca

The Widget Bundle WordPress plugin through 2.0.0 does not sanitise and escape some of its settings, which could allow hi

The Widget Bundle WordPress plugin through 2.0.0 does not have CSRF checks when logging Widgets, which could allow attac

The Google CSE WordPress plugin through 1.0.7 does not sanitise and escape some of its settings, which could allow high

The Widget Bundle WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in t

The WP Logs Book WordPress plugin through 1.0.1 does not sanitise and escape some of its log data before outputting them

The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check when clearing logs, which could allow attackers

The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, which coul

The CSSable Countdown WordPress plugin through 1.5 does not sanitise and escape some of its settings, which could allow

The CB (legacy) WordPress plugin through 0.9.4.18 does not have CSRF checks in some bulk actions, which could allow atta

The CB (legacy) WordPress plugin through 0.9.4.18 does not sanitise and escape some of its settings, which could allow h

The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before out

ClassGraph before 4.8.112 was not resistant to XML eXternal Entity (XXE) attacks.

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin f

The Plus Addons for Elementor Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up

The ConvertKit – Email Newsletter, Email Marketing, Subscribers and Landing Pages plugin for WordPress is vulnerable to

A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. Affecte

A vulnerability classified as critical was found in SourceCodester Food Ordering Management System 1.0. Affected by this

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. Affected is

A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been rated as critical. Th

The WP Blog Post Layouts plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including

The The Plus Addons for Elementor Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via

The WP Child Theme Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ca

The Hide Dashboard Notifications plugin for WordPress is vulnerable to unauthorized modification of data due to a missin

The License Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing c

The Smush plugin for WordPress is vulnerable to unauthorized deletion of the resmush list due to a missing capability ch

A vulnerability was found in SourceCodester Food Ordering Management System 1.0. It has been declared as critical. This

A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been classified as critica

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected

Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for custom

The Lightning Network Daemon (lnd) - is a complete implementation of a Lightning Network node. A parsing vulnerability i

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an admin d

An attacker may be able to cause a denial-of-service condition by sending many packets repeatedly.

An attacker may be able to cause a denial-of-service condition by sending many SSH packets repeatedly.

A Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with the

Plain text credentials and session ID can be captured with a network sniffer.

Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files u