2024

Mattermost Jira plugin versions shipped with Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetQosBand

A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function form

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the fu

Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block

A vulnerability was found in Tenda AC18 15.03.05.05. It has been classified as critical. This affects the function formQ

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker

A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function f

A vulnerability, which was classified as problematic, has been found in Surya2Developer Hostel Management Service 1.0. T

A vulnerability has been found in Surya2Developer Hostel Management Service 1.0 and classified as problematic. Affected

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widg

GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title.

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripti

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to SQL Injection via the 'na

A vulnerability, which was classified as critical, was found in Surya2Developer Hostel Management System 1.0. Affected i

A vulnerability classified as critical was found in MHA Sistemas arMHAzena 9.6.0.0. This vulnerability affects unknown c

A vulnerability classified as problematic has been found in MHA Sistemas arMHAzena 9.6.0.0. This affects an unknown part

A vulnerability was found in BradWenqiang HR 2.0. It has been rated as critical. Affected by this issue is the function

SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of

Zemana AntiLogger v2.74.204.664 is vulnerable to a Denial of Service (DoS) vulnerability by triggering the 0x80002004 an

Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IO

A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_lo

A Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a crafted payload to the email1

Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU

Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU

Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modul

Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU

Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modul

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x8000

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the LinkWr

Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to

An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of

An issue in NETGEAR-DGND4000 v.1.1.00.15_1.00.15 allows a remote attacker to escalate privileges via the next_file param

There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execu

The oik plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes such as bw_contact

A user who can create objects in a database with plv8 3.2.1 installed is able to cause deferred triggers to execute as t

The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/

zenml v0.55.4 was discovered to contain an arbitrary file upload vulnerability in the load function at /materializers/cl

Airflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the unsafe_load function at

Support App is an opensource application specialized in managing Apple devices. It's possible to abuse a vulnerability i

IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML

IBM Integration Bus for z/OS 10.1 through 10.1.0.3 is vulnerable to cross-site request forgery which could allow an atta

vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Le

vantage6-UI is the official user interface for the vantage6 server. In affected versions a number of security headers ar

vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Le