2024

Missing Authorization vulnerability in WPFactory Cost of Goods for WooCommerce allows Exploiting Incorrectly Configured

Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control

Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control

Missing Authorization vulnerability in Clever Widgets Enhanced Text Widget allows Exploiting Incorrectly Configured Acce

Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Exploiting Incorrectly Configured

Cross-Site Request Forgery (CSRF) vulnerability in Tickera.com Tickera allows Cross Site Request Forgery.This issue affe

Missing Authorization vulnerability in Chris Baldelomar Shortcodes allows Exploiting Incorrectly Configured Access Contr

Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Ac

Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Inco

Missing Authorization vulnerability in Karim Salman Kraken.io Image Optimizer allows Exploiting Incorrectly Configured A

Missing Authorization vulnerability in Shopfiles Ltd Ebook Store allows Exploiting Incorrectly Configured Access Control

Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn

A function-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows te

Multiple access control vulnerabilities in Unifiedtransform version 2.0 and potentially earlier versions allow unauthori

An object-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows una

The Fluent Forms WordPress plugin before 5.2.1 does not sanitise and escape some of its settings, which could allow hig

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. T

A vulnerability was found in code-projects Admin Dashboard 1.0. It has been declared as problematic. This vulnerability

A vulnerability was found in WeiYe-Jing datax-web 2.1.1. It has been classified as critical. This affects an unknown par

A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affec

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in DDNS Record functi

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect Setti

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Router Port Forwar

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect MAC F

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Network WOL functi

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in network center pol

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in file station funct

Oxide before 6 has unencrypted Control Plane datastores.

An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. Unprivileged users with network ac

An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. An unprivileged user with network

Zammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and application_secret) in log f

ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded

nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.

The POSIX::2008 package before 0.24 for Perl has a potential _execve50c env buffer overflow.

A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affecte

A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affecte

A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0.

A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affec

Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024

A vulnerability classified as critical has been found in JFinalCMS 1.0. This affects the function findPage of the file s

A vulnerability was found in JFinalCMS 1.0. It has been rated as critical. Affected by this issue is the function update

A vulnerability was found in JFinalCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an un

A vulnerability was found in Guizhou Xiaoma Technology jpress 5.1.2. It has been classified as problematic. Affected is

A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This

A vulnerability has been found in Talentera up to 20241128 and classified as problematic. This vulnerability affects unk

MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persi

A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unkno

A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown funct

A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some u

The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all ve