2024

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dennis Encyclopedi

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ShortPixel ShortPi

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fahad Mahmood Keep Backup Da

A vulnerability was found in OpenSight Software FlashFXP 5.4.0.3970. It has been classified as critical. Affected is an

The SendPulse Free Web Push plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files

The Logo Slider WordPress plugin before 4.1.0 does not validate and escape some of its Slider Settings before outputtin

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up

The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vu

Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code In

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious

A maliciously crafted PDF file, when parsed through Autodesk Revit, may force an Out-of-Bounds Write vulnerability. A ma

REDAXO CMS v2.11.0 was discovered to contain a remote code execution (RCE) vulnerability.

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unboun

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD

An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could al

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could al

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in sunburntkam

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdow

Relative Path Traversal vulnerability in JamesPark.ninja Analyse Uploads analyse-uploads allows Relative Path Traversal.

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in nahimsalami Ahime Image

Deserialization of Untrusted Data vulnerability in taketin TAKETIN To WP Membership taketin-to-wp-membership allows Obje

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Danish Ali Malik Top Bar

Relative Path Traversal vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Path Traversal.Th

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The CSSIgniter Team MaxS

A vulnerability has been identified within Rancher that can be exploited in narrow circumstances through a man-in-the-m

Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalat

A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no matt

A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in Norman's public API endpoint

A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in the API Server's public API

An authorization bypass through user-controlled key vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R

A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEX

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file opera

There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windo

A vulnerability has been identified in which Rancher does not automatically clean up a user which has been deleted from

The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary sho

The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to exis

SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible dependi

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This