2024

A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss.

A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for

A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue results from not releas

A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack o

A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue

Improper Control of Generation of Code ('Code Injection'), Cross-Site Request Forgery (CSRF), : Improper Neutralization

Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OF

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat. This issue affects Apache

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (i

A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication

A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS.

A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of

Deserialization of Untrusted Data vulnerability in Apache HertzBeat. This vulnerability can only be exploited by author

Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module.

ZTE NH8091 product has an improper permission control vulnerability. Due to improper permission control of the Web modul

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows un

The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, w

A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary we

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated

An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated rem

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated rem

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696. It allows an authenticated rem

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695. It allows an authenticated rem

The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulner

The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulner

The DVC from TRCore encrypts files using a hardcoded key. Attackers can use this key to decrypt the files and restore th

AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address wi

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics

Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent.

In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes

In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block.

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed GETDATA

Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure (and daemon exit) via

Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption and ap

Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received

Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood of minimum difficulty h

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) via a crafted INV m

In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed tr

In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because

Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offse

Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-diffic

miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values

A vulnerability, which was classified as critical, has been found in Altenergy Power Control Software up to 20241108. Th

A vulnerability classified as critical was found in Altenergy Power Control Software up to 20241108. This vulnerability