2024

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_transl

A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive ope

Allocation of Resources Without Limits or Throttling vulnerability in Badge leading to a denial of service attack.Team H

qanything_kernel/connector/database/mysql/mysql_client.py in qanything.ai QAnything before 1.2.0 allows SQL Injection.

In the Samly package before 1.4.0 for Elixir, Samly.State.Store.get_assertion/3 can return an expired session, which int

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a larg

In OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of resource_limits.max_sample

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri.

In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attack

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22 and classi

A vulnerability was found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this issue is

Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any acco

A vulnerability has been found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this vuln

IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic key,

IBM Storage Defender - Resiliency Service 2.0 stores user credentials in plain clear text which can be read by a local u

IBM Storage Defender - Resiliency Service 2.0 could allow a privileged user to perform unauthorized actions after obtain

IBM Semeru Runtime 8.0.302.0 through 8.0.392.0, 11.0.12.0 through 11.0.21.0, 17.0.1.0 - 17.0.9.0, and 21.0.1.0 uses weak

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Start Booking Sche

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Calculators World

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ClickToTweet.Com C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Howard Ehrenberg C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If So Plugin If-So

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic, Inc. C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Hosting Pay wit

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 Active

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GiveWP GiveWP – Do

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyAgilePrivacy My

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Add

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in websoudan MW WP Fo

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPoperation Ultra

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt OWL Caro

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark Kinchin Beds2

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Auto Listings A

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Heateor Heate

A vulnerability was found in Linksys WRT54GL 4.30.18. It has been declared as problematic. This vulnerability affects un

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of d

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access due

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to union-based SQL Injectio

A vulnerability was found in Linksys WRT54GL 4.30.18. It has been classified as problematic. This affects an unknown par

This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular express

Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropria

Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client. By default, this allow

Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary informa

ManageWiki is a MediaWiki extension allowing users to manage wikis. Special:ManageWiki does not escape escape interface

pkg is tool design to bundle Node.js projects into an executables. Any native code packages built by `pkg` are written t

Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, t

Envoy is a high-performance edge/middle/service proxy. Envoy crashes in Proxy protocol when using an address type that i

Envoy is a high-performance edge/middle/service proxy. External authentication can be bypassed by downstream connections

Envoy is a high-performance edge/middle/service proxy. The regex expression is compiled for every request and can result

Envoy is a high-performance edge/middle/service proxy. Envoy will crash when certain timeouts happen within the same int