2024

Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migr

Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects

Memory safety bugs present in Firefox 126. Some of these bugs showed evidence of memory corruption and we presume that w

Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidenc

In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by

By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the ad

A website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Fire

By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading to a potentiall

If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an asserti

An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section

Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another sit

On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file w

By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if click

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were fun

In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button

If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant.

If a specific sequence of actions is performed when opening a new tab, the triggering principal associated with the new

Allow attackers to intercept or falsify data exchanges between the client and the server

If exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccess

A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protects

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0012), Tecnomatix Plant S

A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-200

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected a

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected w

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected w

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected w

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected w

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The web interf

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected a

A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.11.0), Mendix Application

A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP

A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates tempora

A vulnerability classified as problematic was found in smallweigit Avue up to 3.4.4. Affected by this vulnerability is a

Missing Authorization vulnerability in Anders Norén Radcliffe 2.This issue affects Radcliffe 2: from n/a through 2.0.17.

Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This iss

Missing Authorization vulnerability in WebCodingPlace Product Expiry for WooCommerce.This issue affects Product Expiry f

The WordPress Online Booking and Scheduling Plugin – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scri

Missing Authorization vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic

Missing Authorization vulnerability in Termly Cookie Consent.This issue affects Cookie Consent: from n/a through 3.2.

Missing Authorization vulnerability in ThemeBoy SportsPress – Sports Club & League Manager.This issue affects SportsPres

Missing Authorization vulnerability in AddonMaster Load More Anything.This issue affects Load More Anything: from n/a th

Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion

Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: f

Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder:

Missing Authorization vulnerability in Yoast Yoast SEO Premium.This issue affects Yoast SEO Premium: from n/a through 20

Missing Authorization vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.1.8.

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flickr widget in all versions

The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sens

This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to SQL Injection via the 'b2sSort