Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that originates from an improper implementation in the Extensions API module...

Huawei HarmonyOS Buffer Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an array out-of-bounds vulnerability. Successful exploitation of this vulnerability cou...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in Telecom. An attacker could exploit the vulnerability to cause information leakage...

libXpm Buffer Error Vulnerability

libXpm is an image file format library in lib open source. A security vulnerability exists in libXpm that stems from an out-of-bounds read vulnerability. An attacker could exploit this vulnerability to cause a denial of service DoS...

WordPress Plugin google-map-shortcode Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the display module, which may lead to information disclosure...

WordPress Plugin WP Adminify Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

NodeBB Code Issues Vulnerabilities

NodeBB is a forum system from the Design Create Play team built using Node.js, a web application platform built on top of Google's V8 JavaScript engine. A code issue vulnerability exists in NodeBB v2.8.10 and earlier versions. An attacker exploited the vulnerability to cause the system to crash...

libhv Injection Vulnerability

libhv is ithewei open source an easier to use than libevent/libuv/asio network library . libhv injection vulnerability , the vulnerability stems from when the use of untrusted user input to set the request header , vulnerable to CRLF injection attacks...

Number withdrawn

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. This CVE number has been withdrawn...

pydash command injection vulnerability

pydash is a python library by the individual developer Derrick Gilland. A command injection vulnerability exists in pydash versions prior to 6.0.0, which stems from vulnerability to command injection attacks...

phpkobo AjaxNewTicker Code Injection Vulnerability

phpkobo AjaxNewTicker is an application from phpkobo Inc. A code injection vulnerability exists in phpkobo AjaxNewTicker version v.1.0.5, which originates from a vulnerability that allows remote attackers to execute arbitrary code via a crafted payload...

WordPress plugin WP Search Analytics cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress plugin RSVPMaker Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

libspf2 Security Vulnerabilities

libspf2 is a libspf2 open source library that allows email systems such as Sendmail, Postfix, Exim, Zmailer, and MS Exchange to check SPF records and ensure that an email is authorized from its domain. This prevents email forgery commonly used by spammers, scammers and email viruses/worms. A...

Scylla Security Breach

Scylla is a ScyllaDB open source real-time big data database compatible with Apache Cassandra and Amazon DynamoDB APIs. Scylla has a security vulnerability that stems from allowing an attacker with CREATE access to elevate to higher privileges...

Cisco Access Point Resource Management Error Vulnerability

Cisco Access Point is a network access point device from Cisco, Inc. It provides high-density wireless connectivity for small offices. A security vulnerability exists in Cisco Access Point that originates from a vulnerability that could allow an unauthenticated, remote attacker to cause a tempora...

yt-dlp OS Command Injection Vulnerability

yt-dlp is based on the youtube-dl branch of the now inactive youtube-dlc. yt-dlp suffers from an operating system command injection vulnerability that stems from not properly escaping special characters...

Number withdrawn

libwebp is a library for encoding and decoding the WebP image format. This CVE number has been withdrawn...

NocoDB Input Validation Error Vulnerability

NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb into a smart spreadsheet. An input validation error vulnerability exists in nocodb that stems from incorrect input validation...