2024

In ZKTeco ZKBio CVSecurity v6.1.1_R and earlier (fixed in 6.1.3_R) an authenticated user can bypass password checks whil

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentif

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentif

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentif

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentif

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentif

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts unidentified

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX ra

A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as critical. Affect

A path traversal vulnerability was identified in the parisneo/lollms-webui repository, specifically within version 9.6.

A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the `

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fixes a random hang in S4 for SMU v13.0

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix off by one in qla_edif_app_getst

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable idle reallow as part of co

In the Linux kernel, the following vulnerability has been resolved: Julia Lawall reported this null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload dur

In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this func

In the Linux kernel, the following vulnerability has been resolved: regmap: maple: Fix cache corruption in regcache_map

In the Linux kernel, the following vulnerability has been resolved: nouveau/uvmm: fix addr/range calcs for remap operat

A cross-site scripting (XSS) vulnerability in the login page of FineSoft v8.0 allows attackers to execute arbitrary web

A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been declared as critical. Aff

A vulnerability was found in SourceCodester Stock Management System 1.0. It has been classified as critical. Affected is

qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/collections/{n

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribu

Two Cross-Site Scripting vulnerabilities have been discovered in Alkacon's OpenCMS affecting version 16, which could all

Two Cross-Site Scripting vulnerabilities have been discovered in Alkacon's OpenCMS affecting version 16, which could all

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vadi Corporate Inf

IBM Aspera Console 3.4.0 through 3.4.2 PL9 allows web pages to be stored locally which can be read by another user on th

IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting. This vulnerability allows users to emb

IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting. This vulnerability allows users to emb

The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized modi

The Simple Like Page Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode

The Gum Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Price Table and Post S

The Comparison Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit

The Comparison Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ

The Comparison Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slider title parameter i

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to

The Font Farsi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up t

The Remote Content Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'remote_content'

The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to DOM-Ba

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress

The The Plus Addons for Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The POST SMTP – The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications plugin for W

Path traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1.4. If this vulnerability is exploited,

The List categories plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'categories' shor

The AffiEasy plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.

The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.

The WP To Do plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to,

The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.

The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.