2024

An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd75626

NULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit 7afa40390b26ad1f4cf93deaa0052fe7e35

GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing it

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI

GLPI is a free asset and IT management software package. An authenticated user can exploit a SQL injection vulnerability

An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Ser

A reachable assertion in the ogs_nas_emm_decode function of Open5GS v2.7.0 allows attackers to cause a Denial of Service

Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req f

The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting (XSS) via the Where textbox on the Reports scre

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure h

Nextcloud Server is a self hosted personal cloud system. After a user received a share with some files inside being bloc

Nextcloud Server is a self hosted personal cloud system. After receiving a "Files drop" or "Password protected" share li

user_oidc app is an OpenID Connect user backend for Nextcloud. A malicious user could send a malformed login link that w

Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or v

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. The Desktop client

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. The Nextcloud mail app incorrectly al

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mai

Nextcloud Tables allows users to to create tables with individual columns. The information which Table (numeric ID) is s

Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary

GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. T

By default, dedicated folders of ZONEPOINT for Windows up to 2024.1 can be accessed by other users to misuse technical f

By default, dedicated folders of ZONECENTRAL for Windows up to 2024.3 or up to Q.2021.2 (ANSSI qualification submission)

By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical file

By default, dedicated folders of ORIZON for Windows up to 2024.3 can be accessed by other users to misuse technical file

By default, dedicated folders of ZEDMAIL for Windows up to 2024.3 can be accessed by other users to misuse technical fil

Hathway Skyworth Router CM5100-511 v4.1.1.24 was discovered to store sensitive information about USB and Wifi connected

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI

GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulner

Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN

An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows at

A buffer overflow in the ngap_amf_handle_pdu_session_resource_setup_response function of oai-cn5g-amf up to v2.0.0 allow

A vulnerability was found in erzhongxmu Jeewms up to 20241108. It has been rated as critical. This issue affects some un

A vulnerability was found in code-projects Inventory Management up to 1.0. It has been declared as critical. This vulner

Budget Control Gateway acts as an entry point for incoming requests and routes them to the appropriate microservices for

Nextcloud Server is a self hosted personal cloud system. Under certain conditions the password of a user was stored unen

Nextcloud Server is a self hosted personal cloud system. After setting up a user or administrator defined external stora

Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniquen

Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider

Nextcloud Server is a self hosted personal cloud system. The OAuth2 client secrets were stored in a recoverable way, so

Nextcloud Server is a self hosted personal cloud system. After an attacker got access to the session of a user or admini

Nextcloud Server is a self hosted personal cloud system. After storing "Global credentials" on the server, the API retur

Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users th

Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provide

emlog pro <=2.3.18 is vulnerable to Cross Site Scripting (XSS), which allows attackers to write malicious JavaScript cod

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quant

CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able t