2024

A DOM based cross-site scripting (XSS) vulnerability in the component index.html of jstrieb/urlpages before commit 035b6

A DOM based cross-site scripting (XSS) vulnerability in the component generator.html of tabatkins/railroad-diagrams befo

A DOM based cross-site scripting (XSS) vulnerability in the component /dom/ranges/Range-test-iframe.html of web-platform

A DOM based cross-site scripting (XSS) vulnerability in the component /beep/Beep.Instrument.js of stewdio beep.js before

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees

Unrestricted Upload of File with Dangerous Type vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a

Unrestricted Upload of File with Dangerous Type vulnerability in JoomUnited WP Media folder.This issue affects WP Media

openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.

flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in update_setting.php.

Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remto

Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.

Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. P

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. P

LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP hea

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. P

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2

A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 1

Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery (SSRF) via the event subs

Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that expo

Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit

A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functiona

A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2

Vulnerability whereby an attacker could send a malicious link to an authenticated operator, which could allow remote att

Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R. This vulnerability cou

This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.

This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by t

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected b

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affec

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affect

The SuperFaktura WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, an

A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messag

The Addon Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on

Due to a mistake in error checking, Routinator will terminate when an incoming RTR connection is reset by the peer too q

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wiloke WooCommerce Coupon Popup, SmartBar, S

The Brizy – Page Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including,

A privilege escalation vulnerability exists in mintplex-labs/anything-llm, allowing users with 'default' role to delete

The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin

Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protoco

As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience fo

Theoretically, it would be possible for an attacker to brute-force the password for an instance in single-user password

User can send a chat that contains an XSS opportunity that will then run when the chat is sent and on subsequent page lo

The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An atta

With the following crawler configuration: ```python from bs4 import BeautifulSoup as Soup url = "https://example.com"

The BackWPup plugin for WordPress is vulnerable to Plaintext Storage of Backup Destination Password in all versions up t