2024

Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today o

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configu

Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online,

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet loc

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports modu

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate re

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lock

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the aut

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts modul

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. N

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. N

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensiti

The WooCommerce Google Feed Manager plugin for WordPress is vulnerable to unauthorized loss of data due to a missing cap

The File Manager Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation an

Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated at

A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as critical. This vulnerability af

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

A vulnerability classified as critical was found in itsourcecode Payroll Management System 1.0. Affected by this vulnera

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been rated as critical. This issue affects

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been declared as critical. This vulnerabil

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this issue

An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_nam

SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_files.ph

Avtec Outpost uses a default cryptographic key that can be used to decrypt sensitive information.

Avtec Outpost stores sensitive information in an insecure location without proper access controls in place.

The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only avai

Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin/add_room_controller.php.

Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php.

An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0,

An Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara Hotel Management System v1.0, which

authentik is an open-source Identity Provider. Several API endpoints can be accessed by users without correct authentica

cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device

cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to gain access to arbitrar

Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonym

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: make apf token non-zero to fix bug I

In the Linux kernel, the following vulnerability has been resolved: ice: fix concurrent reset and removal of VFs Commi

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to incorrect copy_map_value Whe

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unregister flowtable hooks on

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr

In the Linux kernel, the following vulnerability has been resolved: iio: adc: tsc2046: fix memory corruption by prevent

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: add spinlock for rndis response

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is v

Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low pri

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.src_addr outside

In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segme

In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifs

In the Linux kernel, the following vulnerability has been resolved: blktrace: fix use after free for struct blk_trace