2024

A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Thre

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an

A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Thre

A vulnerability in the cluster backup feature of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepo

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerl

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an

A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been declared as critical. Affected b

Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-

HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was ena

A vulnerability was found in ZZCMS 2023. It has been classified as critical. Affected is the function Ebak_SetGotoPak of

A vulnerability was found in ZZCMS 2023 and classified as critical. This issue affects some unknown processing of the fi

A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function Ebak_Do

Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for

Pimcore is an open source data and experience management platform. When a PortalUserObject is connected to a PimcoreUser

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fir

HCL Sametime is impacted by misconfigured security related HTTP headers. It was identified that some HTTP headers were m

A vulnerability, which was classified as problematic, was found in ZZCMS 2023. This affects an unknown part of the file

Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket

A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has

The Nioland theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘s’ parameter in all versions up

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code o

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the fil

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially

A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functiona

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses

The Qi Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,

Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrai

The Transients Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauth

The Download Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of serv

Cross Site Scripting vulnerability in student management system in php with source code v.1.0.0 allows a remote attacker

Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the cont

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera (Firmware Version v3.0.0.1889_230

itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastna

An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send r

A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose

Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.0

Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09. A r

Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to suppo

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supportin

Collabtive 3.1 is vulnerable to Cross-Site Scripting (XSS) via the name parameter in (a) file tasklist.php under action

Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit wi