13120 matches found
CGA-X238-2V8W-3J6M
Bulletin has no description...
CVE-2024-32805
Missing Authorization vulnerability in Social Snap.This issue affects Social Snap: from n/a through 1.3.5...
CVE-2024-30539
Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7...
CVE-2024-44867
phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php...
CGA-5G26-7VMV-85M5
Bulletin has no description...
CVE-2024-24710
Missing Authorization vulnerability in SlickRemix Feed Them Social.This issue affects Feed Them Social: from n/a through 4.2.0...
CVE-2024-28950
Uncontrolled search path for some IntelR oneAPI Math Kernel Library software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-25395
A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2...
CVE-2024-46974
Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers...
CVE-2024-56229
Cross-Site Request Forgery CSRF vulnerability in SearchIQ SearchIQ searchiq.This issue affects SearchIQ: from n/a through = 4.6...
CVE-2024-40410
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption...
CVE-2023-35774
Cross-Site Request Forgery CSRF vulnerability in LWS LWS Tools plugin = 2.4.1 versions...
CVE-2023-51416
Cross-Site Request Forgery CSRF vulnerability in EnvialoSimple EnvíaloSimple.This issue affects EnvíaloSimple: from n/a through 2.2...
CVE-2023-46781
Cross-Site Request Forgery CSRF vulnerability in Roland Murg Current Menu Item for Custom Post Types plugin = 1.5 versions...
CVE-2023-34181
Cross-Site Request Forgery CSRF vulnerability in WP-Cirrus plugin = 0.6.11 versions...
MAL-2025-4308 Malicious code in child-youth-promotion-banner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74c48fe1487afbeef04c06a25fa129aec8e836dc6ff2829c1c8dedf5b239e2e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4391 Malicious code in rapper-wish (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab0c771060f1519932c1a3aa17e1bb894fe76c1fc825c39a1abe9f76b77d5874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4295 Malicious code in @sl4x0/internal-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b6b6646e35885e431949fff4fae0f04d21961751f93c32a2e1136704409e728 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-45809
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0...
CVE-2022-45496
Buffer overflow vulnerability in function jsonparsestring in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 November 14, 2022 allows attackers to code arbitrary code and gain escalated privileges...