2024

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions start

An issue has been discovered in GitLab affecting all versions of GitLab CE/EE 16.9 prior to 16.9.6, 16.10 prior to 16.1

An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.6, all versions starting from 16.10 befo

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesig

The Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery plugin for WordPress is vulnerable to Stored Cross-Site

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativethemeshq B

A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of

Missing Authorization vulnerability in MonsterInsights Google Analytics by Monster Insights.This issue affects Google An

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress

Improper Control of Generation of Code ('Code Injection') vulnerability in AlgolPlus Advanced Order Export For WooCommer

Cross-Site Request Forgery (CSRF) vulnerability in 大侠WP DX-Watermark.This issue affects DX-Watermark: from n/a through 1

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodeRevolution WP Setup Wizard.This issue af

Improper Control of Generation of Code ('Code Injection') vulnerability in Eli Scheetz Anti-Malware Security and Brute-F

Improper Authentication vulnerability in wp-buy Login as User or Customer (User Switching) allows Privilege Escalation.T

Improper Authentication vulnerability in EazyPlugins Eazy Plugin Manager allows Accessing Functionality Not Properly Con

A vulnerability in Brocade SANnav exposes Kafka in the wan interface. The vulnerability could allow an unauthenticated

The Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elem

The Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) plugin for

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized l

Improper Authentication vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This issue affects Bu

Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications tha

In Brocade SANnav, before Brocade SANnav v2.3.0, syslog traffic received clear text. This could allow an unauthenticate

Brocade SANnav before v2.3.0a lacks protection mechanisms on port 2377/TCP and 7946/TCP, which could allow an unauthent

The AGCA WordPress plugin before 7.2.2 does not sanitise and escape some of its settings, which could allow high privil

An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x

In the Linux kernel, the following vulnerability has been resolved: binder: check offset alignment in binder_get_object

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_se

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: do not free live element

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against conne

An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditi

A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow

A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. Affected is the function guestWi

A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue affects the function formSetSy

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insens

A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Soft

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an aut

A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attac

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root pr

A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. This vulnerability affects the funct

A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. This affects the function formSet

A vulnerability, which was classified as critical, has been found in Tenda W15E 15.11.0.14. Affected by this issue is th

NewPipe is an Android app for video streaming written in Java. It supports exporting and importing backups, as a way to

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been ava

A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Fir

A vulnerability classified as critical was found in Tenda W15E 15.11.0.14. Affected by this vulnerability is the functio

A vulnerability classified as critical has been found in Tenda W15E 15.11.0.14. Affected is the function formQOSRuleDel.

A vulnerability was found in Tenda W15E 15.11.0.14. It has been rated as critical. This issue affects the function formI