2024

The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and r

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activit

The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An a

Cross Site Scripting vulnerability in Virtuozzo Hybrid Server for WHMCS Open Source v.1.7.1 allows a remote attacker to

Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by def

A misconfiguration in the fingerprint authentication mechanism of Binance: BTC, Crypto and NFTS v2.85.4, allows attacker

Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that

There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clin

Cross-Site Request Forgery (CSRF) vulnerability in Platform.ly Platform.ly Official platformly allows Stored XSS.This is

Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu W3P SEO wp-perfect-plugin allows Stored XSS.This issu

Cross-Site Request Forgery (CSRF) vulnerability in fraudlabspro FraudLabs Pro SMS Verification fraudlabs-pro-sms-verific

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code.

An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, pos

A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing th

Unrestricted Upload of File with Dangerous Type vulnerability in Hive Support Hive Support hive-support allows Upload a

Unrestricted Upload of File with Dangerous Type vulnerability in Optimal Access KBucket kbucket allows Upload a Web Shel

In lunary-ai/lunary version 1.2.7, there is a lack of rate limiting on the forgot password page, leading to an email bom

parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting (XSS) and Open Redirect due to inadequate input

Giskard is an evaluation and testing framework for AI systems. A Remote Code Execution (ReDoS) vulnerability was discove

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-edi

Deserialization of Untrusted Data vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-

Unrestricted Upload of File with Dangerous Type vulnerability in wpmonks Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles,

Missing Authorization vulnerability in aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in On

Missing Authorization vulnerability in medmatech Matix Popup Builder medma-matix allows Privilege Escalation.This issue

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Unrestricted Upload of File with Dangerous Type vulnerability in softpulseinfotech Picsmize picsmize allows Upload a Web

Unrestricted Upload of File with Dangerous Type vulnerability in faizalbahasan kineticPay for WooCommerce kineticpay-for

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in labs64 DigiPass digipass

Unrestricted Upload of File with Dangerous Type vulnerability in bdthemes Instant Image Generator ai-image allows Upload

Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress boat-rental-s

Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative dat

Unrestricted Upload of File with Dangerous Type vulnerability in DoThatTask Do That Task do-that-task allows Upload a We

Unrestricted Upload of File with Dangerous Type vulnerability in Team Devexhub Devexhub Gallery devexhub-gallery allows

Unrestricted Upload of File with Dangerous Type vulnerability in WebTechGlobal Easy CSV Importer BETA easy-csv-importer

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DonnellC Global Gateway

A SQL Injection was found in /admin/admin_user.php in kashipara E-learning Management System Project 1.0 via the usernam

A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management System Proje

A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning Management System Project 1.0

A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning Management System Project

A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Project 1.0

A SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning Management System Project 1.0

A SQL Injection vulnerability was found in /admin/school_year.php in kashipara E-learning Management System Project 1.0

A SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management System Project 1.0 via th

A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via th

A Python command injection vulnerability exists in the `SagemakerLLM` class's `complete()` method within `./private_gpt/

zenml-io/zenml version 0.56.4 is vulnerable to an account takeover due to the lack of rate-limiting in the password chan

Joplin is a free, open source note taking and to-do application. Joplin-desktop has a vulnerability that leads to remote

A Reflected Cross-Site Scripting (XSS) vulnerability was found in the /search-result.php page of the PHPGurukul User Reg

In lunary-ai/lunary versions up to and including 1.2.5, an information disclosure vulnerability exists where account rec