2024

An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion Contro

Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.

Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.

stereoscope is a go library for processing container images and simulating a squash filesystem. Prior to version 0.0.1,

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Formzu Inc. Formzu

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hometory Mang Boar

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ignazio Scimone Al

Label Studio is a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior t

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poste

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DearHive PDF Viewe

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in InfornWeb Posts Li

In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applicati

In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the appli

A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as problematic. Affected by

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro

Cross-Site Request Forgery (CSRF) vulnerability in DroitThemes Droit Elementor Addons – Widgets, Blocks, Templates Libra

Heap-based buffer overflow vulnerability in Resource Hacker, developed by Angus Johnson, affecting version 3.6.0.92. Thi

An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the sy

An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This functio

A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant

Cross-Site Request Forgery (CSRF) vulnerability in Borbis Media FreshMail For WordPress.This issue affects FreshMail For

Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi Browser Theme Color.This issue affects Browser Theme Col

Cross-Site Request Forgery (CSRF) vulnerability in Elise Bosse Frontpage Manager.This issue affects Frontpage Manager: f

Cross-Site Request Forgery (CSRF) vulnerability in WP Spell Check.This issue affects WP Spell Check: from n/a through 9.

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local pr

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local pr

Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and e

Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with t

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in InstaWP InstaWP Co

Authorization Bypass Through User-Controlled Key vulnerability in ali Forms Contact Form builder with drag & drop for Wo

Cross-Site Request Forgery (CSRF) vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Sc

Cross-Site Request Forgery (CSRF) vulnerability in Luděk Melichar Better Anchor Links allows Cross-Site Scripting (XSS).

A vulnerability was found in Rebuild up to 3.5.5. It has been classified as problematic. Affected is the function getFil

A vulnerability was found in Rebuild up to 3.5.5 and classified as problematic. This issue affects the function QiniuClo

A cross site scripting vulnerability in the AREAL SAS Websrv1 ASP website allows a remote low-privileged attacker to gai

SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation

Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive se

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects Apa

Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of

An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA priva

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unkn

The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized m

In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.

A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 pad

The Contact Form Entries plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validatio

An arbitrary file upload vulnerability in Schlix CMS v2.2.8-1, allows remote authenticated attackers to execute arbitrar