2024

i-Educar is free, fully online school management software that can be used by school secretaries, teachers, coordinators

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions are subject to a bypas

Incorrect access control in the component /servlet/SnoopServlet of Shenzhou News Union Enterprise Management System v5.0

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit

A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System v1.0 via a crafted requ

A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an

A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cau

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affect

A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the veri

A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configurat

A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the veri

The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in

Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specif

Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. Thi

The Xiaomi Security Center expresses heartfelt thanks to Ken Gannon and Ilyes Beghdadi of NCC Group working with Trend M

Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific

A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack

A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with lo

ntfs3 in the Linux kernel through 6.8.0 allows a physically proximate attacker to read kernel memory by mounting a files

A vulnerability classified as critical has been found in Tenda O6 1.0.0.7(2054). Affected is the function fromVirtualSet

A vulnerability was found in Tenda O6 1.0.0.7(2054). It has been rated as critical. This issue affects the function from

A vulnerability was found in Tenda O6 1.0.0.7(2054). It has been declared as critical. This vulnerability affects the fu

A vulnerability was found in Tenda O5 1.0.0.8(5017). It has been classified as critical. This affects the function fromS

A vulnerability was found in Tenda O1 1.0.0.7(10648) and classified as critical. Affected by this issue is the function

A vulnerability has been found in Tenda O1 1.0.0.7(10648) and classified as critical. Affected by this vulnerability is

A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSys

A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the functio

A vulnerability was found in code-projects Responsive Hotel Site 1.0. It has been classified as critical. Affected is an

A vulnerability was found in code-projects Online Quiz Site 1.0 and classified as critical. This issue affects some unkn

A vulnerability has been found in SourceCodester E-Commerce Website 1.0 and classified as critical. This vulnerability a

Hydra is a Continuous Integration service for Nix based projects. It is possible to trigger evaluations in Hydra without

Meshtastic device firmware is a firmware for meshtastic devices to run an open source, off-grid, decentralized, mesh net

In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and un

A weak password requirement issue was discovered in Teldats Router RS123, RS123w allows a remote attacker to escalate pr

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph th

Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Each team can own their slic

Buffer Overflow vulnerability in open source exiftags v.1.01 allows a local attacker to execute arbitrary code via the p

A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via keys smartqos_e

A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an

An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading to a complete crash of

The product exposes a service that is intended for local only to all network interfaces without any authentication.

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging suppor

The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Ser

The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local att

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged a

Authentication Bypass vulnerability in Hitachi Ops Center Common Services.This issue affects Hitachi Ops Center Common S

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network

Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. The Chisel server doesn't ever read the documen