2024

OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observ

An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 b

The LayerSlider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ls_search_form shortc

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's menu

The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is

A denial of service (DoS) condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 16.10.6, 16

The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi

The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 1

In Eclipse Ditto versions 3.0.0 to 3.5.5, the user input of several input fields of the Eclipse Ditto Explorer User Int

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to SQL Injecti

The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ProfilePress User Panel widge

Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to acces

Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. Dapr sends the ap

gitoxide is a pure Rust implementation of Git. During checkout, `gix-worktree-state` does not verify that paths point to

vantage6 is an open-source infrastructure for privacy preserving analysis. Collaboration administrators can add extra or

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds read vulnerability when

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds write vulnerability that

The WordPress + Microsoft Office 365 / Azure AD | LOGIN plugin for WordPress is vulnerable to Stored Cross-Site Scriptin

A vulnerability was found in Huashi Private Cloud CDN Live Streaming Acceleration Server up to 20240520. It has been cla

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This

A XSS condition exists within GitLab in versions 15.11 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1. By

The WP Ultimate Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpupg-text

The ShareThis Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sharethi

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: fix slab-use-after-free in msft_do

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Fix potential null-ptr-deref Fix p

An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthori

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical.

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.

A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management Syst

The Hash Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter within multi

The does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSR

This does not validate a path generated with user input when downloading files, allowing unauthenticated user to downlo

The WP Fastest Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2

The Flattr WordPress plugin through 1.2.2 does not sanitise and escape some of its settings, which could allow high priv

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow hi

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the p

The Brizy – Page Builder plugin for WordPress is vulnerable to unauthorized plugin setting update due to a missing capab

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin f

The IDonate WordPress plugin through 1.9.0 does not sanitise and escape some of its settings, which could allow high pr

The Button contact VR WordPress plugin through 4.7 does not sanitise and escape some of its settings, which could allow

A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected

A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affe

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. T

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical

The Oxygen Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.8

The RomethemeForm For Elementor plugin for WordPress is vulnerable to unauthorized access and modification of data due t