2024

A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an unauthenticate

A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an authenticated,

A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker

A vulnerability in the web-based management interface and in the API subsystem of Cisco Tetration could allow an au

A vulnerability in a debug function for Cisco RCM for Cisco StarOS Software could allow an unauthenticated, re

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker

A vulnerability in the web-based management interface of Cisco Prime Access Registrar Appliance could allow an auth

A cross-site scripting (XSS) vulnerability in Shenzhen Landray Software Co.,LTD Landray EKP v16 and earlier allows attac

IBM Concert Software 1.0.0 through 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the fa

IBM Concert Software 1.0.0 through 1.0.1 is vulnerable to cross-site scripting. This vulnerability allows an unauthentic

A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) IPv4 access control list (ACL) fe

A vulnerability classified as problematic has been found in code-projects Online Shop Store 1.0. This affects an unknown

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functiona

A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the func

A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPre

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling o

A stored cross-site scripting (XSS) vulnerability exists in craigk5n/webcalendar version 1.3.0. The vulnerability occurs

An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail messag

A stored cross-site scripting (XSS) vulnerability exists in openemr/openemr version 7.0.1. An attacker can inject malici

phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwo

A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gf_filterpacket_del functi

A stored Cross-site Scripting (XSS) vulnerability exists in the Conditions tab of Pricing Rules in pimcore/pimcore versi

wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily d

A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability all

A Cross-Site Scripting (XSS) vulnerability in phpipam/phpipam versions prior to 1.4.7 allows attackers to execute arbitr

An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricte

A Cross-site Scripting (XSS) vulnerability exists in janeczku/calibre-web, specifically in the file `edit_books.js`. The

An improper access control vulnerability exists in janeczku/calibre-web. The affected version allows users without publi

A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to othe

sylius/sylius versions prior to 1.9.10, 1.10.11, and 1.11.2 are vulnerable to stored cross-site scripting (XSS) through

A stored cross-site scripting (XSS) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2

A Session Fixation vulnerability exists in chatwoot/chatwoot versions prior to 2.4.0. The application does not invalidat

The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for Wo

The Secure Custom Fields WordPress plugin before 6.3.9, Secure Custom Fields WordPress plugin before 6.3.6.3, Advanced C

The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for Wo

The Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the

The Jobs for WordPress plugin before 2.7.8 does not sanitise and escape some of its Job settings, which could allow high

The Yotpo: Product & Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior t

Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an

The Music Player for Elementor – Audio Player & Podcast Player plugin for WordPress is vulnerable to unauthorized modifi

The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu

The LearnPress Export Import – WordPress extension for LearnPress plugin for WordPress is vulnerable to Reflected Cross-

The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing c

A heap-based buffer under-read in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Servic

A negative-size-param in tsMuxer version nightly-2024-04-05-01-53-02 allows attackers to cause Denial of Service (DoS) v

A heap-based buffer overflow in tsMuxer version nightly-2024-05-10-02-00-45 allows attackers to cause Denial of Service

A stack-based buffer over-read in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Information Disc

In the autofill service, the package name that is provided by the app process is trusted inappropriately.  This could le