2024

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Microsoft OfficePlus Elevation of Privilege Vulnerability

Windows DNS Spoofing Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/T

The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authenticated attacker to cond

Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escal

A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resultin

Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated attacke

A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or U

Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB e

An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with acces

A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the pa

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the

An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affe

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultimate Bootstr

A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allow

Incorrect Authorization vulnerability in WPWeb Docket (WooCommerce Collections / Wishlist / Watchlist) allows Accessing

IBM Common Licensing 9.0 does not require that users should have strong passwords by default, which makes it easier for

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPWeb WooCommerce PDF Vo

Insertion of Sensitive Information Into Sent Data vulnerability in Javier Carazo Import and export users and customers i

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HitPay Payment Solutions Pte Ltd HitPay Paym

Cross-Site Request Forgery (CSRF), Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scrip

Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Proper

Missing Authorization vulnerability in anhvnit Woocommerce OpenPos allows Accessing Functionality Not Properly Constrain

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enfor

A vulnerability has been identified in NX (All versions < V2406.3000). The affected applications contains an out of boun

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected a

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application executes a subset of it

The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valida

BEx Web Java Runtime Export Web Service does not sufficiently validate an XML document accepted from an untrusted source

Some OCC API endpoints in SAP Commerce Cloud allows Personally Identifiable Information (PII) data, such as passwords, e

A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPFactory P

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sender Send

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in 10Web Form

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pierre Lebe

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MultiVendor

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Parcel Pane

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AddonMaster