2024

The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Code Inje

The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local Fil

The 10Web AI Assistant – AI content writing assistant plugin for WordPress is vulnerable to unauthorized modification of

The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Insecure

The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Stored Cr

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c

The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scr

The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and includin

The Unlimited Addons for WPBakery Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to insuf

This plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to,

The File Manager Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Script

The GeneratePress Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom meta

The Advanced Custom Fields (ACF) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom text fie

The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due t

The EditorsKit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation on the '

The The Events Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and

The Meta Box – WordPress Custom Fields Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via c

The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the r

The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extra

An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to co

Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL

Sulu is a highly extensible open-source PHP content management system based on the Symfony framework. There is an issue

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Unsafe echo of fi

Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack management when compiling the `I

Buffer Overflow vulnerability in the function setSchedWifi in Tenda AC9 v.3.0, firmware version v.15.03.06.42_multi allo

phpMyFAQ is an Open Source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The 'sharing FAQ'

Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An a

A security vulnerability has been identified in the cryptlib cryptographic library when cryptlib is compiled with the su

SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages

A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that us

StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.13 are susceptible to a Denial of Service (D

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. phpMyFAQ's user r

Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker

gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_b

gpac v2.2.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the dasher_configure_pid function at /src

gpac v2.2.1 was discovered to contain a memory leak via the dst_props variable in the gf_filter_pid_merge_properties_int

Lotos WebServer v0.1.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the response_append_status_lin

media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_uac_stop_timer function a

media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_subscribe_remove function

freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry functi

freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function.

Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number

A reflected cross-site scripting (XSS) vulnerability exists in the SVG version of System Diagnostics Manager of B&R Auto

When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the pag

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via th

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via th