2024

Cross-Site Scripting in FireEye HXTool affecting version 4.6. This vulnerability allows an attacker to store a specially

Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacke

fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of `@fastify/s

Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This v

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability all

XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify

The JSM file_get_contents() Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters

The Keap Official Opt-in Forms WordPress plugin through 1.0.11 does not sanitise and escape some of its settings, which

The easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg WordPress p

The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local var

The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using

The WP Crowdfunding WordPress plugin before 2.1.10 does not sanitise and escape some of its settings, which could allow

The WP Custom Widget area WordPress plugin through 1.2.5 does not properly apply capability and nonce checks on any of i

The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generat

The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which coul

The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like

The EazyDocs WordPress plugin before 2.3.6 does not have authorization and CSRF checks when handling documents and does

The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of

Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnera

The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which co

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command executi

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of ar

PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code execution via

PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signed partitio

Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerabil

Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerabil

A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guar

An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the con

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users ar

A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attac

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes

Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentica

Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the af

A vulnerability was found in FreeFloat FTP Server 1.0 and classified as problematic. Affected by this issue is some unkn

A vulnerability has been found in Ability FTP Server 2.34 and classified as problematic. Affected by this vulnerability

pkg_postinst in the Gentoo ebuild for Slurm through 22.05.3 unnecessarily calls chown to assign root's ownership on file

A vulnerability, which was classified as problematic, has been found in EasyFTP 1.7.0. This issue affects some unknown p

A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3. This vulnerabilit

A vulnerability classified as critical has been found in CodeAstro Real Estate Management System up to 1.0. This affects

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. Affected by this issue is the functi

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. Affected by this vulnerability is

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. Affected is the function formOf

A vulnerability was found in Tenda W9 1.0.0.7(4456) and classified as critical. This issue affects the function formQosM

Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can ex

A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical. This vulnerability affects the func

A vulnerability, which was classified as critical, was found in Tenda W9 1.0.0.7(4456). This affects the function setWrl

A vulnerability, which was classified as critical, has been found in Tenda W9 1.0.0.7(4456). Affected by this issue is t

A vulnerability classified as critical was found in Tenda PA6 1.0.1.21. Affected by this vulnerability is the function c

A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the f