2024

The Slickstream: Engagement and Conversions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

The RSS Feed Widget WordPress plugin before 3.0.0 does not validate and escape some of its shortcode attributes before o

The RSS Feed Widget WordPress plugin before 3.0.1 does not escape the $_SERVER['REQUEST_URI'] parameter before outputtin

The xili-tidy-tags plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in al

Active debug code vulnerability exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerab

The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File upl

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Aff

The Futurio Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.0.1

The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via th

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the before_label pa

In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field b

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacke

A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and ea

A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker tha

An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access.

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the serv

SAP NetWeaver AS Java allows an unauthenticated attacker to brute force the login functionality in order to identify the

In SAP NetWeaver Java (Software Update Manager 1.1), under certain conditions when a software upgrade encounters errors,

SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated attacker to send a maliciously cra

Due to missing authorization check in SAP NetWeaver AS Java (System Landscape Directory) an unauthorized user can read a

A vulnerability, which was classified as critical, was found in code-projects Task Manager 1.0. This affects an unknown

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hos

Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the

Persistent and reflected XSS vulnerabilities in the themeMode cookie and _h URL parameter of Axigen Mail Server up to ve

The NetAdmin IAM system (version 4.0.30319) has a Cross Site Scripting (XSS) vulnerability in the /BalloonSave.ashx endp

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_pars

libosdp is an implementation of IEC 60839-11-5 OSDP (Open Supervised Device Protocol) and provides a C library with supp

Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panel

Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface se

Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing d

Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing d

Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface sec

TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS)

TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS)

TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS)

TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS)

The DS allvideo.downloader.browser (aka Fast Video Downloader: Browser) application through 1.6-RC1 for Android allows a

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affec

A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability aff

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows a privileg

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects

IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows authenticate

A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting

A Cross Site Scriptng (XSS) vulnerability was found in /omrs/admin/search.php in PHPGurukul Online Marriage Registration

A Cross Site Scripting (XSS) vulnerability was found in /ums-sp/admin/registered-users.php in PHPGurukul User Management

A Reflected Cross Site Scriptng (XSS) vulnerability was found in /omrs/user/search.php in PHPGurukul Online Marriage Reg

Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Ac

A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scrip

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries