2024

A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with onl

The Tutor LMS plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due

A command injection vulnerability exists in the RunGptLLM class of the llama_index library, version 0.9.47, used by the

A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code exe

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Form

A stored Cross-Site Scripting (XSS) vulnerability exists in the 'imartinez/privategpt' repository due to improper valida

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously address

A path traversal vulnerability exists in the 'save_settings' endpoint of the parisneo/lollms-webui application, affectin

imartinez/privategpt version 0.2.0 is vulnerable to a local file inclusion vulnerability that allows attackers to read a

A command injection vulnerability exists in the 'run_xtts_api_server' function of the parisneo/lollms-webui application,

Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could

Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could

Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result

Animate versions 24.0.2, 23.0.5 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead

Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in ar

Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in ar

Animate versions 24.0.2, 23.0.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could result i

Animate versions 24.0.2, 23.0.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result

Animate versions 24.0.2, 23.0.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could resul

Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in ar

Substance3D - Designer versions 13.1.1 and earlier Answer: are affected by an out-of-bounds read vulnerability that coul

Adobe Aero Desktop versions 23.4 and earlier are affected by a Use After Free vulnerability that could result in arbitra

Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result

A remote code execution vulnerability exists in the parisneo/lollms-webui application, specifically within the reinstall

A vulnerability in the parisneo/lollms-webui allows for arbitrary file upload and read due to insufficient sanitization

A path traversal vulnerability in the '/apply_settings' endpoint of parisneo/lollms-webui allows attackers to execute ar

Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to dis

Illustrator versions 28.4, 27.9.3 and earlier are affected by a Use After Free vulnerability that could result in arbitr

Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted

A vulnerability was found in SourceCodester SchoolWebTech 1.0. It has been classified as critical. Affected is an unknow

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical.

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000-40 V31R02B1413C and classified as crit

The Custom Post Type Attachment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pdf_

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack Gro

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000-40 V31R0

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000-40

Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-7000-40 V31R02B1413C. Aff

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000-40 V31R02B1413C

A vulnerability was found in SourceCodester Online Art Gallery Management System 1.0. It has been declared as critical.

ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct object references that allow

The Menu Icons by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘add_mime_type’ fu

The Tutor LMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘question_id’ parameter in versions

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Refere

The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow h

The Newsletter Popup WordPress plugin through 1.2 does not have CSRF check when deleting list, which could allow attacke

The Newsletter Popup WordPress plugin through 1.2 does not have CSRF check when deleting subscriber, which could allow a

The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some parameters, which could allow unauth

A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been classified as problematic. A

A vulnerability has been found in SourceCodester Simple Online Bidding System 1.0 and classified as critical. Affected b