2024

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS versio

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary s

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.