2024

Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerabi

Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerab

Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulne

Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulne

The Pods WordPress plugin before 3.2.7.1 does not sanitise and escape some of its settings, which could allow high priv

The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow at

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin WordPress plugin before 1.6.7.55 does not

The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could

A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an

A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability

The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'scu' short

Combodo iTop is a simple, web based IT Service Management tool. Server, OS, DBMS, PHP, and iTop info (name, version and

Meshtastic firmware is a device firmware for the Meshtastic project. The Meshtastic firmware does not check for packets

gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket s

localai <=2.20.1 is vulnerable to Cross Site Scripting (XSS). When calling the delete model API and passing inappropriat

In gradio <=4.42.0, the gr.DownloadButton function has a hidden server-side request forgery (SSRF) vulnerability. The re

A vulnerability was found in code-projects University Event Management System 1.0. It has been classified as critical. T

Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within th

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 108

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when process

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrator

Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrato

A Stored Cross-Site Scripting (XSS) Vulnerability in Chamilo LMS 1.11.26 allows a remote attacker to execute arbitrary J

A Cross-Site Request Forgery (CSRF) vulnerability in Chamilo LMS 1.11.26 "/main/social/home.php," allows attackers to in

Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote atta

Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administr

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators

Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrato

A vulnerability, which was classified as critical, has been found in Codezips Free Exam Hall Seating Management System 1

A vulnerability classified as critical was found in Codezips Online Institute Management System up to 1.0. This vulnerab

A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects a

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Gan

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Custom pos

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Build

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeRevolution WP

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrestaProject Cres

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcel Pol Elo Rat

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Knowledge Bas

Server-Side Request Forgery (SSRF) vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Bna Informatics PosPratik

This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint.

This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticate

This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint. An authentica

This vulnerability exists in the Wave 2.0 due to insufficient encryption of sensitive data received at the API response.

This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device f

Memory corruption while processing IOCTL calls to unmap the buffers.

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

Memory corruption while processing the update SIM PB records request.