2024

Cross-site request forgery (CSRF) vulnerability in easy-popup-show all versions allows a remote unauthenticated attacker

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated at

Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format a

The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attac

The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access cus

The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attac

The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attac

Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.

Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.

Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Vi

Missing Authorization vulnerability in Sparkle WP Educenter.This issue affects Educenter: from n/a through 1.5.5.

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated at

HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary comm

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The custom action

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs

CarrierWave is a solution for file uploads for Rails, Sinatra and other Ruby web frameworks. The vulnerability CVE-2023-

OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation o

** UNSUPPORTED WHEN ASSIGNED ** ** DISPUTED ** A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and cla

A vulnerability, which was classified as critical, has been found in Tenda AC10 16.03.10.13/16.03.10.20. Affected by thi

A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.05.19/15.03.20. Affected by this vulner

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetSambaCo

A vulnerability was found in Tenda AC10U 15.03.06.48/15.03.06.49. It has been rated as critical. This issue affects the

A vulnerability was found in Tenda AC15 15.03.20_multi. It has been declared as critical. This vulnerability affects the

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been classified as critical. This affects the

A vulnerability was found in Tenda AC15 15.03.05.18 and classified as critical. Affected by this issue is the function s

In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, all

The XAO::Web module before 1.84 for Perl mishandles < and > characters in JSON output during use of json-embed in Web::A

The Mojolicious module before 7.66 for Perl may leak cookies in certain situations related to multiple similar cookies f

Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POS

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is in

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.

A vulnerability classified as critical was found in SourceCodester Simple File Manager 1.0. This vulnerability affects u

Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor

Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.

Missing Authorization vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9.

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler ao

A vulnerability classified as problematic was found in Campcodes Online Shopping System 1.0. This vulnerability affects

The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable t

The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p

The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gute

The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gute

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the legacy Image wi

The Move Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's infobox

The "BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages" plugin for WordPress is vulnerable

The Custom WooCommerce Checkout Fields Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

.NET Framework Information Disclosure Vulnerability

Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of perfor

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability