2024

Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly

The Awesome buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btn2 shortcode in

The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modificat

The Order Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a mis

A vulnerability classified as problematic was found in chidiwilliams buzz 1.1.0. This vulnerability affects the function

A vulnerability classified as critical has been found in SourceCodester Payroll Management System 1.0. This affects the

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0.

A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. Affected by this

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown f

A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulner

Pterodactyl is a free, open-source game server management panel. When a user disables two-factor authentication via the

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflak

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all

A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Affected

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In versions below 1.5.0,

A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz t

A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in "Something went

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. By inte

Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Bl

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 4

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog p

Incorrect access control in Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2

IBM Maximo Application Suite - Monitor Component 8.10, 8.11, and 9.0 could disclose information in the form of the hard-

A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this v

A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is a

Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code a

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 an

The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A person with physical access to

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An

When editing objects in the Syncope Console, incomplete HTML tags could be used to bypass HTML sanitization. This made i

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robosoft Robo Gall

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins WP

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kraft Plugins Mega

A Cross-Site Scripting vulnerability has been found in Janto v4.3r11 from Impronta. This vulnerability allows an attacke

The Contact Form 7 – Repeatable Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin'

The WP Adminify – Custom WordPress Dashboard, Login and Admin Customizer plugin for WordPress is vulnerable to Stored Cr

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam WpE

Missing Authorization vulnerability in Magazine3 Schema & Structured Data for WP & AMP schema-and-structured-data-for-wp

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membership allo

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tooltip’ parameter in all

The Extra Product Options Builder for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

A vulnerability, which was classified as critical, has been found in PHPGurukul Vehicle Record System 1.0. This issue af

The Compact WP Audio Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sc_embe

An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.

The PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip plugin for WordPress is vulnerable to Reflected Cross-Si