2024

Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and be

A vulnerability was found in Gabriels FTP Server 1.2. It has been rated as problematic. This issue affects some unknown

Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated use

In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes a group name from t

A vulnerability was found in Solar FTP Server 2.1.1/2.1.2. It has been declared as problematic. This vulnerability affec

Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execu

A vulnerability classified as problematic was found in SourceCodester Employee Management System 1.0. This vulnerability

A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by t

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulner

A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposu

An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensi

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE bin

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new varia

Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows (bgAutoinstaller service modules) all

Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into t

spbu_se_site is the website of the Department of System Programming of St. Petersburg State University. Before 2024.01.2

Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnera

Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected b

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected

A vulnerability was found in Shanxi Diankeyun Technology NODERP up to 6.0.2 and classified as critical. This issue affec

A vulnerability has been found in Shanxi Diankeyun Technology NODERP up to 6.0.2 and classified as critical. This vulner

A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139_B20201216. This affects the

A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by

The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provid

The EventON WordPress plugin before 4.4.1 does not sanitise and escape a parameter before outputting it back in the page

The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthentica

The Easy SVG Allow WordPress plugin through 1.0 does not sanitize uploaded SVG files, which could allow users with a rol

The WP SOCIAL BOOKMARK MENU WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, w

The Autotitle for WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which cou

The Site Notes WordPress plugin through 2.0.0 does not have CSRF checks in some of its functionalities, which could allo

The TJ Shortcodes WordPress plugin through 0.1.3 does not validate and escape some of its shortcode attributes before ou

The WP Plugin Lister WordPress plugin through 2.1.0 does not have CSRF check in some places, and is missing sanitisation

The Custom User CSS WordPress plugin through 0.2 does not have CSRF check in place when updating its settings, which cou

The WordPress Users WordPress plugin through 1.4 does not have CSRF check in place when updating its settings, which cou

The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via the "wptbto" parameter. This makes it poss

The Woostify Sites Library WordPress plugin before 1.4.8 does not have authorisation in an AJAX action, allowing any aut

The Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo WordPress plugin before 2.2.25 does not sanitise and esc

The Restrict Usernames Emails Characters WordPress plugin before 3.1.4 does not sanitise and escape some of its settings

The Wp-Adv-Quiz WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high

The Wp-Adv-Quiz WordPress plugin before 1.0.3 does not sanitise and escape some of its settings, which could allow high

The Page Builder: Pagelayer WordPress plugin before 1.8.0 doesn't prevent attackers with administrator privileges from i

A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a

The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference (I

LightCMS v2.0 is vulnerable to Cross Site Scripting (XSS) in the Content Management - Articles field.

Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacke

Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. A

A vulnerability classified as critical was found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by this vulnerabilit

A vulnerability classified as critical has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected is the function