2024

Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing

Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and v

Insecure Default Initialization of Resource vulnerability in Apache Solr. New ConfigSets that are created via a Restore

A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. [Rancher Au

The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple paramet

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing c

The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to authorization bypass due to a missin

The File Manager Pro plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and inc

The File Manager Pro plugin for WordPress is vulnerable to arbitrary backup file downloads and uploads due to missing fi

The File Manager Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due t

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data du

The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on sev

The Post Grid plugin for WordPress is vulnerable to blind SQL Injection via post metadata in versions up to, and includi

The Kaswara Modern VC Addons plugin for WordPress is vulnerable to authorization bypass in versions up to, and including

The Essential Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to and inc

The Product Filter by WooBeWoo plugin for WordPress is vulnerable to authorization bypass in versions up to, and includi

The WP Lead Plus X plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.

The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and i

The Rich Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the POST body 'update' parameter i

The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in near

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST

The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters su

The MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance plugin for WordPress is vulnerable

The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Server-Side Request Forgery in versions up to, and

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in

Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network.

Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a netwo

Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.

Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed a remote attacker wh

Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced

Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap cor

Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the ren

Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to en

Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local att

Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exp

Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corru

An issue in Ruijie NBR3000D-E Gateway allows a remote attacker to obtain sensitive information via the /tool/shell/postg

kmqtt v0.2.7 is vulnerable to Denial of Service (DoS) due to a Null Pointer Exception. A remote attacker can cause the b

In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with fo

Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: R

Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: R

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payro

Vulnerability in the Oracle Financials product of Oracle E-Business Suite (component: Common Components). Supported ver

Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Authoring). Supported vers

Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Auctions). Supported versions that

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (componen

Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integrat

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Messages). Supported version