2024

The WP Project Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabili

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course ba

A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be byp

A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `template-post-c

There exists a code execution vulnerability in the Car App Android Jetpack Library. CarAppService uses deserialization l

**UNSUPPORTED WHEN ASSIGNED** The improper authentication vulnerability in the Zyxel P-6101C ADSL modem firmware version

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to SQL Injection via t

The Save as PDF Plugin by Pdfcrowd plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 's

The Yaad Sarig Payment Gateway For WC plugin for WordPress is vulnerable to unauthorized modification & access of data d

Improper access control vulnerability in M-Files Aino in versions before 24.10 allowed an authenticated user to access o

Authentication bypass condition in LDAP authentication in M-Files server versions before 24.11 supported usage of OpenLD

Local File Inclusion vulnerability in M-Files Server in versions before 24.11 (excluding 24.8 SR1, 24.2 SR3 and 23.8 SR7

Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware ver

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Rakuten Turbo

Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earli

The Booster for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_q

The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of

The 404 Solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, an

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification

The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode execution in all versio

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data that

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Reflected Cross-Sit

Use of hard-coded cryptographic key issue exists in "Kura Sushi Official App Produced by EPARK" for Android versions pri

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that

The GD bbPress Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_qu

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app ma

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app ma

In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could le

In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote

In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This

In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation. This could lead to d

lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.0, th

Cross-Site Request Forgery (CSRF) vulnerability in w3speedster W3SPEEDSTER w3speedster-wp.This issue affects W3SPEEDSTER

Cross-Site Request Forgery (CSRF) vulnerability in Kalmang Dynamic Widgets dynamic-widgets.This issue affects Dynamic Wi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM Beaver Buil

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scri

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in NetTantra W

In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This co

In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permission

In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This coul

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Thi

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized

In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized dat

In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This coul

In f_hidg_read and hidg_disable of f_hid.c, there is a possible use-after-free due to improper locking. This could lead