2024

An improper removal of sensitive information before storage or transfer vulnerability [CWE-212] in FortiSOAR version 7.3

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiWeb version 7.4.0, version

A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker t

DigiWin EasyFlow .NET lacks validation for certain input parameters. An unauthenticated remote attacker can inject arbit

Cross Site Scripting (XSS) vulnerability in Xabier Miranda WP Back Button allows Stored XSS.This issue affects WP Back B

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bryan Hadaw

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in GregRoss Ju

The Active Admin (aka activeadmin) framework before 3.2.2 for Ruby on Rails allows stored XSS in certain situations wher

Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often prov

Cross-site scripting vulnerability exists in UNIVERSAL PASSPORT RX versions 1.0.0 to 1.0.8, which may allow a remote aut

Cross-site scripting vulnerability exists in UNIVERSAL PASSPORT RX versions 1.0.0 to 1.0.7, which may allow a remote aut

In eemgpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In dmc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escal

In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to local inform

In modem, there is a possible information disclosure due to using risky cryptographic algorithm during connection establ

In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade che

In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial o

In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of

In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local inf

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. This v

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This

A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by

MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic

MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service

MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass

MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function

MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow

A path traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'copy_to_custom_personas' en

A vulnerability was found in Casdoor up to 1.335.0. It has been classified as problematic. Affected is an unknown functi

The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Cross-Sit

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Global Noti

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Erez Hadas-Sonnens

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M A Vinoth Kumar R

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the lunary-ai/lunary application, version 1.2.10.

The Elements For Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and includi

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to unau

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to SQL

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'slug' attribute of the 'wpforo' shortcode

Cross-Site Request Forgery (CSRF) vulnerability in Uploadcare Uploadcare File Uploader and Adaptive Delivery (beta) uplo

The User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is

The Contact Form Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [xyz-cfm-for

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to St

The QQWorld Auto Save Images plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabili

The Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder plugin for WordPress is vulnerable to Stored Cross-S

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi