2024

Cross-Site Request Forgery (CSRF) vulnerability in Automattic Crowdsignal Dashboard – Polls, Surveys & more polldaddy al

Cachi2 is a command-line interface tool that pre-fetches a project's dependencies to aid in making the project's build p

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allow

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the U

DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ip_position_asp function via the ip parameter.

The Bard theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without app

The Ashe theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without app

The Parallax Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘position’ parameter in all

The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘extra_class’ parameter i

The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's print_em

Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients

The SVG Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all ver

The WordPress GDPR plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross

In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to impl

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since

In the Linux kernel, the following vulnerability has been resolved: net: enetc: allocate vf_state during PF probes In

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when uninstalling drive

In the Linux kernel, the following vulnerability has been resolved: net: arc: fix the device for dma_map_single/dma_unm

In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: spdifrx: fix dma channel release in st

In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus

In the Linux kernel, the following vulnerability has been resolved: media: av7110: fix a spectre vulnerability As warn

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: prevent the risk of a division by

In the Linux kernel, the following vulnerability has been resolved: dm: fix a crash if blk_alloc_disk fails If blk_all

In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking in filemap_read() If

In the Linux kernel, the following vulnerability has been resolved: signal: restore the override_rlimit logic Prior to

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid overflow in damon_feed_loop_ne

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for

In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove entry once instead of null-ptr-derefe

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MartyThornley Phot

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maximilian Ruthe M

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sohelwpexpert WP R

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Santhosh veer Styl

Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a c

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in verkkovaraani Prin

Path Traversal: '.../...//' vulnerability in Greg Ross CYAN Backup cyan-backup allows Path Traversal.This issue affects

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpjobportal WP Job

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Md. Shiddikur Rahm

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA Extensions AA A

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpwebsitecreator W

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JavierMendezPWG Si

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RobertoAlicata ra_

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeies Pvt Ltd Pr

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Offshorent Solutio

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Offshorent Solutio

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Offshorent Solutio

The Google for WooCommerce plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and inclu

Autolab is a course management service that enables auto-graded programming assignments. There is an HTML injection vuln

Autolab is a course management service that enables auto-graded programming assignments. There is a vulnerability in ver

Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and sched