2024

A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been declared as problematic. Affected by this

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘label_years’

The AI Infographic Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi

The Video Gallery – YouTube Playlist, Channel Gallery by YotuWP plugin for WordPress is vulnerable to Local File Inclusi

The Video Gallery – YouTube Playlist, Channel Gallery by YotuWP plugin for WordPress is vulnerable to Local File Inclusi

The Collapse-O-Matic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'expand' and 'ex

The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress is vulnerable to Remote Code Execu

The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortco

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Stored Cross-Site S

The FooEvents for WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improp

The WooCommerce - Social Login plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inc

The WooCommerce - Social Login plugin for WordPress is vulnerable to Email Verification in all versions up to, and inclu

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Motion Text and T

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sg_general_toggle_tab_en

The Newspaper theme for WordPress is vulnerable to Stored Cross-Site Scripting via attachment meta in the archive page i

The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'single' module i

The tagDiv Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.8

The Popup Builder plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a miss

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to un

A vulnerability was found in Guangdong Baolun Electronics IP Network Broadcasting Service Platform 2.0. It has been clas

HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application.

HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header.  This could allow an attacke

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of se

MyFinances is a web application for managing finances. MyFinances has a way to access other customer invoices while sign

Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payroll_items.php via the ID parameter.

Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a craft

The Open Link is a CKEditor plugin, extending context menu with a possibility to open link in a new tab. The vulnerabili

A cross-site scripting (XSS) vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary web scripts or HTML

An arbitrary file upload vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary code via uploading a cra

Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php.

Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sen

Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result

A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edi

Nextcloud Server is a self hosted personal cloud system. Private shared calendar events' recurrence exceptions can be re

user_oidc app is an OpenID Connect user backend for Nextcloud. An attacker could potentially trick the app into acceptin

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection i

Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versi

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integra

Nextcloud Server is a self hosted personal cloud system. A recipient of a share with read&share permissions could reshar

TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via the submit-url parameter

TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via the submit-url parameter

TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a command injection vulnerability via the ipv4_ping, ipv6_p

TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow via the submit-url parameter at /formNewSc

The Nextcloud Notes app is a distraction free notes taking app for Nextcloud. If an attacker managed to share a folder c

Nextcloud Calendar is a calendar app for Nextcloud. Authenticated users could create an event with manipulated attachmen

Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore

An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity requirements and set single

TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, w

A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. The vulnerability allows a u

A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows