2024

Jsish v3.5.0 (commit 42c694c) was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c.

Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c.

Jsish v3.5.0 (commit 42c694c) was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish

Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page.

SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS) vulenrability via the comp

Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting (XSS) vulnerability vi

Improper Authentication vulnerability in Apache Ozone. The vulnerability allows an attacker to download metadata intern

The Podlove Subscribe button plugin for WordPress is vulnerable to UNION-based SQL Injection via the 'button' attribute

The Podlove Podcast Publisher plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c

The Podlove Podcast Publisher plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabil

Observable timing discrepancy vulnerability in Apache Pulsar SASL Authentication Provider can allow an attacker to forge

Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" (lgsitemaps) module for Pr

In the module "Mailjet" (mailjet) from Mailjet for PrestaShop before versions 3.5.1, a guest can download technical info

SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" (hiadvancedgiftwrapping) module for PrestaShop before versio

SQL Injection vulnerability in RM bookingcalendar module for PrestaShop versions 2.7.9 and before, allows remote attacke

The Quiz Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on th

The Quiz Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) plugin for WordPress is vulnerabl

Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0

The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored

The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Script

The WP RSS Aggregator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and inclu

The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Profile Display Name and Social Se

An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions

An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DL

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folde

Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to

Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because

A vulnerability has been found in SourceCodester Product Management System 1.0 and classified as problematic. This vulne

A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unk

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset

Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to a

Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retri

A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by

A vulnerability classified as problematic was found in CodeAstro University Management System 1.0. Affected by this vuln

jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseRespon

jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com.jsh.erp.utils.BaseRespons

jshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseRe

Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap co

Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit h

A vulnerability classified as problematic has been found in CodeAstro University Management System 1.0. Affected is an u

A vulnerability has been found in Juanpao JPShop up to 1.5.02 and classified as critical. Affected by this vulnerability

A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter sca

A stored XSS vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus a

A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows

Certain configuration available in the communication channel for encoders could expose sensitive data when reader config

A vulnerability, which was classified as critical, was found in Juanpao JPShop up to 1.5.02. Affected is the function ac

A vulnerability, which was classified as critical, has been found in Juanpao JPShop up to 1.5.02. This issue affects the

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma templa

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing