2024

A vulnerability classified as critical has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromVirtual

A vulnerability was found in Tenda F1202 1.2.0.20(408). It has been rated as critical. This issue affects the function f

Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache.This issue affects LiteSpeed Cache: from n

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technolo

Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admi

Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AitThemes Citadela Listing.This issue affect

A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the func

A vulnerability was found in SMI SMI-EX-5414W up to 1.0.03. It has been classified as problematic. This affects an unkno

Memory safety bugs present in Firefox 124. Some of these bugs showed evidence of memory corruption and we presume that w

Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory c

The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows

The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a

If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and l

An out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently tra

On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by

It was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This vulnerability affects F

The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garba

A use-after-free could occur during WASM execution if garbage collection ran during the creation of an array. This vulne

In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability

In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This

A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection st

GetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects

There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to cre

The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss v22.6.1 is vulnerable to command injection in `finetun

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `git_caption_g

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `group_images_

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the `common_gui.p

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the `common_gui.p

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to command injection in basic_caption_g

DocsGPT is a GPT-powered chat for documentation. DocsGPT is vulnerable to unauthenticated limited file write in routes.p

Open WebUI is a user-friendly WebUI for LLMs. Open-webui is vulnerable to authenticated blind server-side request forger

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' sh

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized email sending due to a missing c

The WooCommerce Google Feed Manager plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all ve

Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p26 and <2.3.0b5 allows local attacker to

The archive-tainacan-collection theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of ad

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain d

The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements mul

In huge memory get unmapped area check, code can never be reached because of a logical contradiction.

An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.

A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access

Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.

In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computa

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Exclusive Addons E

Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perf

An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information and execute arbitrary co