2024

The Backup Agents section in WBSAirback 21.02.04 is affected by a Path Traversal vulnerability, allowing a user with low

Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an attacker to create a manipulated H

A vulnerability of Information Exposure has been found on Technicolor CGA2121 affecting the version 1.01, this vulnerabi

Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated

Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, an

Out-of-bounds write vulnerability exists in KV STUDIO Ver.11.64 and earlier, KV REPLAY VIEWER Ver.2.64 and earlier, and

VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic

Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 NDP packets exists in C

Cross-Site Request Forgery (CSRF) vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This iss

A potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA stor

A potential security vulnerability has been identified in Web ViewPoint Enterprise software. This vulnerability could b

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Podlove Podlove Po

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin User Activi

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xenioushk BWL Adva

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPZest Disable Com

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nasirahmed Forms t

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codeboxr Team CBX

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Markus Seyer Find

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booking Algorithms

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Page Visit Counter

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExportFeed.Com Pro

Cross-Site Request Forgery (CSRF) vulnerability in Kamlesh Parmar Sync Post With Other Site sync-post-with-other-site al

Cross-Site Request Forgery (CSRF) vulnerability in Kaloyan K. Tsvetkov Broken Images allows Cross-Site Scripting (XSS).T

Cross-Site Request Forgery (CSRF) vulnerability in Venugopal Change default login logo,url and title allows Cross-Site S

Cross-Site Request Forgery (CSRF) vulnerability in Nick Powers Social Author Bio allows Stored XSS.This issue affects So

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlueGlass Jobs for

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PineWise WP Google

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders Short

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Schuppenie

In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak p

The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers

The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to

The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter before

The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attacker

A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an un

Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below does not proper sanitize user input, a

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing

A vulnerability classified as critical has been found in cym1102 nginxWebUI up to 3.9.9. This affects the function handl

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandle

Traefik is an HTTP reverse proxy and load balancer. In affected versions sending a GET request to any Traefik endpoint w

Netdata is an open source observability tool. In affected versions the `ndsudo` tool shipped with affected versions of t

NiceGUI is an easy-to-use, Python-based UI framework. A local file inclusion is present in the NiceUI leaflet component

wn-dusk-plugin (Dusk plugin) is a plugin which integrates Laravel Dusk browser testing into Winter CMS. The Dusk plugin

Xibo is an Open Source Digital Signage platform with a web content management system and Windows display player software