2024

Omission of user-controlled key authorization in the IDMSistemas platform, affecting the QSige product. This vulnerabili

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the use of the 'tag' attribute

The WP Recipe Maker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘Referer' header in all

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in a

A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical butt

A vulnerability has been found in Novel-Plus 4.3.0-RC1 and classified as critical. Affected by this vulnerability is an

In autotest driver, there is a possible out of bounds write due to improper input validation. This could lead to local d

In drm driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of

In vsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of

In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of

In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of

In telephone service, there is a possible improper input validation. This could lead to local information disclosure wit

In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with

In phasecheckserver, there is a possible out of bounds write due to a missing bounds check. This could lead to local den

In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local den

In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local deni

In video decoder, there is a possible improper input validation. This could lead to local denial of service with no addi

In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local deni

In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local deni

In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local den

In media service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local deni

In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local den

In jpg driver, there is a possible missing permission check. This could lead to local information disclosure with System

A vulnerability, which was classified as problematic, was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. Aff

A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been rated as problematic. Affecte

A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. Affecte

Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting

A vulnerability was found in Karjasoft Sami HTTP Server 2.0. It has been classified as problematic. Affected is an unkno

The Spreadsheet::ParseXLSX package before 0.30 for Perl allows XXE attacks because it neglects to use the no_xxe option

pyLoad is a free and open-source Download Manager written in pure Python. The `pyload` API allows any API call to be mad

A vulnerability was found in Project Worlds Visitor Management System 1.0. It has been classified as problematic. Affect

SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfp

A vulnerability was found in ZhiHuiYun up to 4.4.13 and classified as critical. This issue affects the function download

A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. This vulnerability affects unknown

flaskBlog is a simple blog app built with Flask. Improper storage and rendering of the `/user/<user>` page allows a user

Creditcoin is a network that enables cross-blockchain credit transactions. The Windows binary of the Creditcoin node loa

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Un

  Cross-site scripting (XSS)

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with

A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows remote attackers to inject

Studio Network Solutions ShareBrowser before 7.0 on macOS mishandles signature verification, aka PMP-2636.

A vulnerability, which was classified as problematic, was found in Sparksuite SimpleMDE up to 1.11.2. This affects an un

Insecure Direct Object Reference vulnerabilities were discovered in the Avaya Aura Experience Portal Manager which may a

Missing Authorization vulnerability in ThemeinProgress WIP Custom Login.This issue affects WIP Custom Login: from n/a th

Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin-edit.ph

Stupid Simple CMS <=1.2.4 is vulnerable to Cross Site Scripting (XSS) in the editing section of the article content.