2024

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bou

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value

A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file r

A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for

A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue results from not releas

A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue

A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS.

ZTE NH8091 product has an improper permission control vulnerability. Due to improper permission control of the Web modul

A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary we

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated rem

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated rem

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696. It allows an authenticated rem

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695. It allows an authenticated rem

The DVC from TRCore encrypts files using a hardcoded key. Attackers can use this key to decrypt the files and restore th

Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.

In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes

In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block.

Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure (and daemon exit) via

Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption and ap

Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received

In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because

Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.

A vulnerability, which was classified as critical, has been found in Altenergy Power Control Software up to 20241108. Th

A vulnerability classified as critical was found in Altenergy Power Control Software up to 20241108. This vulnerability

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other ex

A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

The 404 Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the popup class parameter in a

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capabili

The Bounce Handler MailPoet 3 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parame

The SVG Case Study plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all version

The BulkPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg witho

The Exclusive Divi – Divi Preloader, Modules for Divi & Extra Theme plugin for WordPress is vulnerable to Stored Cross-S

The PeproDev WooCommerce Receipt Uploader plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to th

The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Cross-Site R

The 404 Error Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ

The SVGPlus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versi

The WP Log Viewer plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability ch

The SimpleForm Contact Form Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the

The SimpleForm – Contact form made simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to th

The Gallery Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_Query_

The WP Chat App plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check

The The Drop Shadow Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and

The Steel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btn shortcode in all versio

The PJW Mime Config plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versio

The ConvertCalculator for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' and '

The Popup Box – Create Countdown, Coupon, Video, Contact Form Popups plugin for WordPress is vulnerable to unauthorized

The Popularis Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2

The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capabil