2024

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be tr

Contiki-NG is an open-source, cross-platform operating system for IoT devices. The Contiki-NG operating system processes

Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromis

Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap

Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects

Jenkins Simple Queue Plugin 1.4.4 and earlier does not escape the view name, resulting in a stored cross-site scripting

An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300R

Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow.

EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controll

This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center a

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This af

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion)

Stored Cross-Site Scripting in the Access Request History in Omada Identity before version 15 update 1 allows an authent

OpenVidReview 1.0 is vulnerable to Cross Site Scripting (XSS) in review names.

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, all

Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render hal

A Reflected Cross Site Scripting (XSS) vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COV

A SQL Injection vulnerability was found in /covid-tms/check_availability.php in PHPGurukul COVID 19 Testing Management S

A SQL Injection vulnerability was found in /covid-tms/password-recovery.php in PHPGurukul COVID 19 Testing Management Sy

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type

The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read

The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with addit

In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem

The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function

When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allo

A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access

There was discovered a use after free bug in browser.c in the es_browser_get_variant function

The reported vulnerability is a stack buffer overflow in the zbx_snmp_cache_handle_engineid function within the Zabbix s

The Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) plugin for WordPress is vulnerable

An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administrat

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions

Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which a

A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through

An authenticated user with API access (e.g.: user with default User role), more specifically a user with access to the u

The Counter Up – Animated Number Counter & Milestone Showcase plugin for WordPress is vulnerable to Stored Cross-Site Sc

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized form su

The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cro

A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversation

A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platfo

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Path

The ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi

An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect

A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution

A vulnerability, which was classified as problematic, has been found in code-projects Crud Operation System 1.0. This is

editorconfig-core-c is theEditorConfig core library written in C (for use by plugins supporting EditorConfig parsing).

A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerabilit

A vulnerability classified as critical has been found in PHPGurukul User Registration & Login and User Management System

A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0. It has been rated as c

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose in