2024

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Privilege Management

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notice Manage module.

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component {{rootpath}

A stored cross-site scripting (XSS) vulnerability in OneBlog v2.3.4 allows attackers to execute arbitrary web scripts or

datahub-helm provides the Kubernetes Helm charts for deploying Datahub and its dependencies on a Kubernetes cluster. Sta

Saleor Storefront is software for building e-commerce experiences. Prior to commit 579241e75a5eb332ccf26e0bcdd54befa33f4

OAuthenticator provides plugins for JupyterHub to use common OAuth providers, as well as base classes for writing one's

Qiskit IBM Runtime is an environment that streamlines quantum computations and provides optimal implementations of the Q

Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distribut

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via t

A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been classified as problematic. Thi

A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0 and classified as problematic. Affected by

A vulnerability has been found in Campcodes Complete Online DJ Booking System 1.0 and classified as critical. Affected b

Umbraco is an ASP.NET content management system. Umbraco 10 prior to 10.8.4 with access to the native login screen is vu

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio

Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provi

Zulip is an open-source team collaboration tool. When a user moves a Zulip message, they have the option to move all mes

A Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices. When sending a certain

A vulnerability was found in Tenda AC10U 15.03.06.48. It has been rated as critical. Affected by this issue is the funct

A vulnerability was found in Tenda AC10U 15.03.06.49. It has been declared as critical. Affected by this vulnerability i

A vulnerability was found in Tenda AC10U 15.03.06.49. It has been classified as critical. Affected is the function fromS

A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical. This issue affects the function formexe

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A store

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A store

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A store

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A store

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A store

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD is vulnerable to a denial-of-service attack due to an error within

A vulnerability has been found in Tenda AC10U 15.03.06.49 and classified as critical. This vulnerability affects the fun

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49. This affects the function formW

A vulnerability, which was classified as critical, has been found in Tenda AC10U 1.0/15.03.06.49. Affected by this issue

Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoo

Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to leak cross-orig

Incorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing vi

Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform U

Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap c

Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bo

Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit ob

A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49. Affected by this vulnerability is the funct

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49. Affected is the function formSetDevice

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A store

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbi

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A store

latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PB

In Progress MOVEit Transfer versions released before 2022.0.11 (14.0.11), 2022.1.12 (14.1.12), 2023.0.9 (15.0.9), 2023.

There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000

Unit4 Financials by Coda versions prior to 2023Q4 suffer from an incorrect access control authorization bypass vulnerabi

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbi

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A path

Firebird is a relational database. Versions 4.0.0 through 4.0.3 and version 5.0 beta1 are vulnerable to a server crash w