2024

The primary channel is unprotected on Movistar 4G router affecting E version S_WLD71-T1_v2.0.201820. This device has the

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvert

IBM Maximo Application Suite - Maximo Mobile for EAM 8.10 and 8.11 could disclose sensitive information to a local user.

IBM Maximo Application Suite 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to em

IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL para

IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 is vulnerable to cross-site scripting. This vulnerabilit

An unauthenticated remote attacker can use an XSS attack due to improper neutralization of input during web page generat

An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user

RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component main_menu/edit_sec

An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service (DoS) vi

The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.

Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially

Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string

The disabling function of the user registration page for Heimavista Rpage and Epage is not properly implemented, allowin

The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1

The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi

The WP Go Maps for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and incl

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘b

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all v

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to

The Blossom Spa theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update.

The weForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Referer' HTTP header in all versi

Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application

A vulnerability, which was classified as critical, was found in Gacjie Server up to 1.0. This affects the function index

Directus is a real-time API and App dashboard for managing SQL database content. The authentication API has a `redirect`

Directus is a real-time API and App dashboard for managing SQL database content. When reaching the /files page, a JWT is

Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Vela pipelines ca

aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP sm

Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary

SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Per

SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via

A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Process

Cross Site Scripting vulnerability in My Food Recipe Using PHP with Source Code v.1.0 allows a local attacker to execute

Cross Site Scripting (XSS) vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows at

Cross Site Scripting (XSS) vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary cod

The CWW Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Module2 widget in all versio

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zoo

FreeScout is an open source help desk and shared inbox built with PHP. A vulnerability has been identified in the Free

stimulus_reflex is a system to extend the capabilities of both Rails and Stimulus by intercepting user interactions and

Peering Manager is a BGP session management tool. There is a Server Side Template Injection vulnerability that leads to

Peering Manager is a BGP session management tool. In Peering Manager <=1.8.2, it is possible to redirect users to an arb

Peering Manager is a BGP session management tool. Affected versions of Peering Manager are subject to a potential stored

A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow mem

One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could h

The vulnerability allows authenticated users with only produce or consume permissions to modify topic-level policies, su

The Pulsar Functions Worker includes a capability that permits authenticated users to create functions where the functio

In Pulsar Functions Worker, authenticated users can upload functions in jar or nar files. These files, essentially zip f