Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway allows Reflected XSS.This issue affects ...
Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 versions....
A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The att...
Memory Corruption when executing system service routines due to improper handling of user input buffers....
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations....
Transient DOS when processing a continuous receive command with a zero-sized global configuration override....
Memory corruption when processing draw objects of incorrect type during graphics command list execution....
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization....
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed....
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms....
Memory corruption when non-secure loader rewrites page tables before secure memory initialization....
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionalit...
The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST...
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_email'...
Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions....
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions....
Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 versions....
Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Morning ...
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions....
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument user_id leads to improp...
A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. This manipulation of ...