2024

Improper input validation for some Intel(R) Wireless Bluetooth(R) products for Windows before version 23.40 may allow an

Improper buffer restrictions in some Intel(R) Graphics software may allow an authenticated user to potentially enable es

Uncontrolled search path for some Intel(R) Binary Configuration Tool software for Windows before version 3.4.5 may allow

Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi products

Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors m

Sensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr module software before version 1

Improper buffer restrictions in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to pote

Integer overflow for some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially ena

An information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password is logged in plaintext

A stored cross-site scripting (XSS) vulnerability in the Create Customer API in Incognito Service Activation Center (SAC

SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to

Cross Site Scripting vulnerability in Cyber Cafe Management System v.1.0 allows a local attacker to execute arbitrary co

In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to l

In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a thir

In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to

In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion.

In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy.

In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 (2024.4.1106), importing a document with un

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. A vulnerability exi

A Reflected cross-site scripting (XSS) vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote atta

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumblew

A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipi

Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects T

A vulnerability was found in VIWIS LMS 9.11. It has been classified as critical. Affected is an unknown function of the

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Googl

The AFI – The Easiest Integration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerabi

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a

CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory a

The Hash Elements plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on

The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to Information Exposure in all versi

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up

The Product Delivery Date for WooCommerce – Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting du

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dir' p

The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vu

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a mis

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a mis

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a mis

The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the

The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to do_shortcode being hooked t

The Aqua SVG Sprite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versio

The Social Proof (Testimonial) Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's

The AJAX Login and Registration modal popup + inline form plugin for WordPress is vulnerable to Reflected Cross-Site Scr

Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with

A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify se

The NiceJob plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes (ni

The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c