2024

In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and s

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd75626

Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allo

KASO v9.0 was discovered to contain a SQL injection vulnerability via the person_id parameter at /cardcase/editcard.jsp.

The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability.

yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improp

A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands w

A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote a

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems (PACS) / Access Contr

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager

A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server. The vu

An improper restriction of external entities (XXE) vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Re

DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passi

The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass

Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit t

The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for

The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and rece

The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form. This c

The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and r

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activit

The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An a

A misconfiguration in the fingerprint authentication mechanism of Binance: BTC, Crypto and NFTS v2.85.4, allows attacker

Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that

There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clin

Unrestricted Upload of File with Dangerous Type vulnerability in Hive Support Hive Support hive-support allows Upload a

Unrestricted Upload of File with Dangerous Type vulnerability in Optimal Access KBucket kbucket allows Upload a Web Shel

Deserialization of Untrusted Data vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-

Unrestricted Upload of File with Dangerous Type vulnerability in wpmonks Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles,

Missing Authorization vulnerability in medmatech Matix Popup Builder medma-matix allows Privilege Escalation.This issue

Unrestricted Upload of File with Dangerous Type vulnerability in softpulseinfotech Picsmize picsmize allows Upload a Web

Unrestricted Upload of File with Dangerous Type vulnerability in faizalbahasan kineticPay for WooCommerce kineticpay-for

Unrestricted Upload of File with Dangerous Type vulnerability in bdthemes Instant Image Generator ai-image allows Upload

Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress boat-rental-s

Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative dat

Unrestricted Upload of File with Dangerous Type vulnerability in DoThatTask Do That Task do-that-task allows Upload a We

Unrestricted Upload of File with Dangerous Type vulnerability in Team Devexhub Devexhub Gallery devexhub-gallery allows

Unrestricted Upload of File with Dangerous Type vulnerability in WebTechGlobal Easy CSV Importer BETA easy-csv-importer

A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via th

A Python command injection vulnerability exists in the `SagemakerLLM` class's `complete()` method within `./private_gpt/

A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the user

A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document con

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to,

Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traff

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endp

In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't

DataEase is an open source data visualization analysis tool. Prior to 2.10.2, DataEase allows attackers to forge jwt and

Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code vi

A vulnerability has been identified in the way that Rancher stores vSphere's CPI (Cloud Provider Interface) and CSI (Con